Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2009-2409 (GCVE-0-2009-2409)
Vulnerability from cvelistv5 – Published: 2009-07-30 19:00 – Updated: 2024-08-07 05:52
VLAI?
EPSS
Summary
The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:52:14.899Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "36139",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/36139"
},
{
"name": "36157",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/36157"
},
{
"name": "MDVSA-2009:197",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197"
},
{
"name": "MDVSA-2009:216",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216"
},
{
"name": "DSA-1888",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2009/dsa-1888"
},
{
"name": "oval:org.mitre.oval:def:8594",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594"
},
{
"name": "GLSA-200911-02",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
},
{
"name": "36434",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/36434"
},
{
"name": "GLSA-200912-01",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
},
{
"name": "1022631",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1022631"
},
{
"name": "42467",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/42467"
},
{
"name": "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
},
{
"name": "RHSA-2009:1207",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1207.html"
},
{
"name": "20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/515055/100/0/threaded"
},
{
"name": "36669",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/36669"
},
{
"name": "RHSA-2009:1432",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
},
{
"name": "USN-810-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/usn-810-1"
},
{
"name": "oval:org.mitre.oval:def:10763",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763"
},
{
"name": "MDVSA-2009:258",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:258"
},
{
"name": "USN-810-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/810-2/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://java.sun.com/javase/6/webnotes/6u17.html"
},
{
"name": "oval:org.mitre.oval:def:7155",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155"
},
{
"name": "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
},
{
"name": "ADV-2010-3126",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2010/3126"
},
{
"name": "RHSA-2010:0095",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html"
},
{
"name": "ADV-2009-3184",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2009/3184"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
},
{
"name": "oval:org.mitre.oval:def:6631",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631"
},
{
"name": "APPLE-SA-2009-11-09-1",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html"
},
{
"name": "MDVSA-2010:084",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084"
},
{
"name": "37386",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/37386"
},
{
"name": "ADV-2009-2085",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2009/2085"
},
{
"name": "DSA-1874",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2009/dsa-1874"
},
{
"name": "36739",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/36739"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.apple.com/kb/HT3937"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-07-29T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "36139",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/36139"
},
{
"name": "36157",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/36157"
},
{
"name": "MDVSA-2009:197",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197"
},
{
"name": "MDVSA-2009:216",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216"
},
{
"name": "DSA-1888",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2009/dsa-1888"
},
{
"name": "oval:org.mitre.oval:def:8594",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594"
},
{
"name": "GLSA-200911-02",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
},
{
"name": "36434",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/36434"
},
{
"name": "GLSA-200912-01",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
},
{
"name": "1022631",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1022631"
},
{
"name": "42467",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/42467"
},
{
"name": "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
},
{
"name": "RHSA-2009:1207",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1207.html"
},
{
"name": "20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/515055/100/0/threaded"
},
{
"name": "36669",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/36669"
},
{
"name": "RHSA-2009:1432",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
},
{
"name": "USN-810-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/usn-810-1"
},
{
"name": "oval:org.mitre.oval:def:10763",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763"
},
{
"name": "MDVSA-2009:258",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:258"
},
{
"name": "USN-810-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/810-2/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://java.sun.com/javase/6/webnotes/6u17.html"
},
{
"name": "oval:org.mitre.oval:def:7155",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155"
},
{
"name": "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
},
{
"name": "ADV-2010-3126",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2010/3126"
},
{
"name": "RHSA-2010:0095",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html"
},
{
"name": "ADV-2009-3184",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2009/3184"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
},
{
"name": "oval:org.mitre.oval:def:6631",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631"
},
{
"name": "APPLE-SA-2009-11-09-1",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html"
},
{
"name": "MDVSA-2010:084",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084"
},
{
"name": "37386",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/37386"
},
{
"name": "ADV-2009-2085",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2009/2085"
},
{
"name": "DSA-1874",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2009/dsa-1874"
},
{
"name": "36739",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/36739"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.apple.com/kb/HT3937"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2009-2409",
"datePublished": "2009-07-30T19:00:00",
"dateReserved": "2009-07-09T00:00:00",
"dateUpdated": "2024-08-07T05:52:14.899Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"14E6A30E-7577-4569-9309-53A0AF7FE3AC\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"14E6A30E-7577-4569-9309-53A0AF7FE3AC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"3.12.2\", \"matchCriteriaId\": \"FD8D62AB-8BC8-4A00-ACDA-5D224C043129\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2DDA50B0-D3D2-456D-B48A-BD5EE72B8E7F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C15CFFC-5D0F-4BBB-9428-06B475274235\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"141015B2-BE49-4EE8-ABE8-E8D18DA2C9E3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"91423E7A-6AD0-4203-A779-E4495E889310\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6FC8DF55-463F-4002-A227-05E51545EBE9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A41F970E-8918-4A30-B3E2-BDEF85FFF372\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E44BF206-EBE6-4FC6-97E8-6C2C994612AE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9B8DEE0E-354F-4C7A-8AE1-0F21E91829A8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BE0E4EB6-8389-47B8-839F-1B8D4E781A13\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.4.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4C4F2FFC-CAE0-480D-8FCE-E7A8923ED452\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"04657D90-D5E4-4EFA-9016-1459815C0393\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"74A235D9-DA84-4448-B4AB-0D2BD809B3B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.6.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1CCA94E0-F5CF-4873-AD4B-ADA82967A5F6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7DAF7717-A813-411A-A18A-2524EB63C949\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"57B8CAE7-D938-4CF4-BB75-C039CACA0968\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B48D1426-B803-4E55-996D-E397CE6A5FAE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C893C67-6E8F-4C37-9DC3-52BA2D4C441C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.7.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"24304AE2-ECA2-4255-B0F3-245CDBE630C9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.7.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A4145734-9500-4818-BA42-22691386571F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B9CB9668-2D0D-4101-B895-9A792402EC4A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF3CB1AC-EC26-4AC3-84F9-0A6D4B54B634\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.9.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B25E1B37-9809-4855-BE37-358F25DE6FD2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F9ED04A6-49B8-42DC-BF0F-868CD60473F6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.11.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F5D38075-BD60-4D44-99FA-3756A735BD7D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.11.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"64487A7D-770E-4F71-9DCD-50336F681B7D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.11.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DF9A0BAB-3B27-4E54-8881-F56FC3630EA7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.11.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1A79CFF5-B1D6-4B2F-9327-B6C451C47EA3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"542A1310-8470-4780-8AD5-C72721BA298C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:nss:3.12.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0ACB2CAD-4C94-44B8-B61B-97CF7DA5DB26\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8A4E446D-B9D3-45F2-9722-B41FA14A6C31\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AF4EA988-FC80-4170-8933-7C6663731981\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"64F8F53B-24A1-4877-B16E-F1917C4E4E81\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"75D3ACD5-905F-42BB-BE1A-8382E9D823BF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"766EA6F2-7FA4-4713-9859-9971CCD2FDCB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2BB38AEA-BAF0-4920-9A71-747C24444770\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1F33EA2B-DE15-4695-A383-7A337AC38908\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"261EE631-AB43-44FE-B02A-DFAAB8D35927\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1A1365ED-4651-4AB2-A64B-43782EA2F0E8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EC82690C-DCED-47BA-AA93-4D0C9E95B806\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"2.6.3\", \"matchCriteriaId\": \"95002BAD-9C8A-4DCE-A900-7948F2FC9BCF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.0.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4FBB8F2C-498D-4D31-A7D7-9991BABEA7A6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.0.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8856E1B1-8007-42E5-82EF-4700D4DEEDDA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A9CF40D3-CE03-4C2A-8EEF-EB5989291806\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EC60D4CC-922C-4941-A400-0CBEAC7F31D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"754A0D19-A17A-4007-8355-497D14CFCBF9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8140DBE1-8116-4051-9A57-07535586E0AF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"56D2DF7F-DCDD-486D-B906-F9DDE3A1DB70\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F1CC840D-AD01-4EE2-8652-06742A6286BA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"84224A82-6D58-4000-A449-20C1632DAE85\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A466931C-769A-4A28-B072-10930CE655E6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2FEE50AC-8730-4F04-B57C-6BDF8B957F6D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"10F621DC-7967-4D97-A562-02E7033C89C2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"776E5481-399F-45BC-AD20-A18508B03916\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"63D7F972-9128-4A4D-8508-B38CE2F155E9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C5D56873-E8C5-4E4B-BB85-6DCF6526B453\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"54FE4766-32D0-491E-8C71-5B998C468142\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.19:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7F980857-2364-466A-8366-BD017D242222\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4CDCF1F0-5A78-48FF-B4B0-303AE2420F6A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.21:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0A2E649D-5C45-4412-927B-E3EDCE07587C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"066175C2-6E96-4BAE-B1A6-B23D25547FAC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.1.23:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"869D3010-67AE-44D0-BB8F-D9C410AEA1D8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"052B40C1-C29B-4189-9A45-DAE873AB716D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"02F71E61-7455-4E10-B9D8-2B7FDDFB10F6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5E05A9A1-6B7A-43FB-A9B8-41B68CA5FDCD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1FB08FD9-9AB8-4015-A8BE-FD9F7EBAC6DA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B588AAE0-8C3F-47C7-812F-8C97BD8795E5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EBB9154B-4254-4F33-8DB2-5B96E2DA4931\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"64D9C191-6A57-40BB-BDD1-6B1A6BBAB51E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2EA79D1-2EA8-4040-A5B5-C93EE937945A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"61D05BC3-1315-4AC7-884D-41459272C94B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.8.1a1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2901E522-6F54-4FA5-BF22-463A9D6B53D8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"738F29DA-9741-4BA5-B370-417443A3AC2E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"52173492-1031-4AA4-A600-6210581059D3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.2.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB636C36-2884-4F66-B68A-4494AEAF90C3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"777A16E4-A1F5-48DC-9BF0-CD9F0DCF8B55\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EC4231BD-201D-4B10-9E35-B9EEFC714F6A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4C9200C3-0F46-4238-918B-38D95BF11547\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"024A9511-7CB4-4681-8429-0FE7FC34DF1A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"34CEF5ED-87A5-44B2-8A4A-9896957C057B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.3.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B84A4F5-CED7-4633-913F-BE8235F68616\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"97564ABD-F9CE-4B3C-978A-1622DE3E4924\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3DB6EC88-DCE0-439B-89CD-18229965849B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1E2C89DD-CDBD-4772-A031-089F32006D80\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.4.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8C2FD618-91F4-48E7-B945-90CC0A367DE6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.4.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"65DC9555-E76F-4F8D-AE39-5160B34A87FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.4.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8B61D180-9EEA-4258-9A59-7F004F2C83F2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"00DE1208-BDDC-405B-A34A-B58D00A279DD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B8EF689E-59AA-4619-ADB2-E195CFD4094A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B62AB660-5DA4-4F13-AF9E-DC53D0A18EED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.5.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"22314ED6-D0CD-442E-A645-A9CCFE114AE1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.5.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A9E1C5B2-27BF-4328-9336-98B8828EE4BE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.5.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5C952BF-A135-4B15-8A51-94D66B618469\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6ADED309-0A25-478D-B542-96217A0DD63E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.6.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DC0403DE-76B1-4E24-8014-64F73DCB53DB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.6.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"69EA91B0-249F-41B2-8AD0-0C2AD29BE3D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.6.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7F714D22-873A-4D64-8151-86BB55EFD084\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4E9181F9-50FF-4995-9554-022CF93376C2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AED0B40F-3413-40D6-B1EF-E6354D2A91F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4E99A7D8-2303-4268-8EF8-6F01A042BEDE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"86C70F69-FB80-4F32-A798-71A5153E6C29\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B2A1E604-500E-4181-BF66-BB69C7C3F425\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0C8120E3-B60F-44E4-B837-4707A9BAEDBE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"84D3F16F-2C23-48E9-9F2D-1F1DF74719E5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F7073EAD-06C9-4309-B479-135021E82B99\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"546C56AC-AFCC-47B7-A5A8-D3E3199BEA41\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1895868E-E501-42C2-8450-EEED4447BAB3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2ED1FCE0-260B-4FB2-9DBD-F4D0D35639AC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"199AA36A-3B23-438C-9109-CC9000372986\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DD6FFF05-37B2-4D69-86AF-921591382D21\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"82BF8600-4E5D-4FF4-953C-F2DC726CA6CA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"04C40F0E-B102-4FE8-9E93-0ACFBF35226D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"22802660-D33F-4683-B82F-C94AC6170A73\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3623E9BE-F513-4301-BF0C-6A7F87E78E7A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5DBAF08-1441-4F14-A740-E90044B77042\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4CE9BB7E-DDD8-4CBF-AEC2-40D59A560BD2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:1.7.19:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5D3B6684-3890-4B60-BE67-D06045A86B3B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"81C6C982-21D5-4FE3-A342-FC45BD78D2F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A69E3A01-D8C6-4C36-8C4E-52B96541D5B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F9D61596-01EB-4936-923B-63537625F926\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"599EB59C-7717-47A8-84C6-78B6D79AEB02\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4A6CBB77-818D-4DFF-9DD9-07EBF9933B06\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"26E9005E-5034-43F2-B96E-7829E19FE3A8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6FA854EA-29FE-4B91-AEA3-ED649D7FD25A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4DC3A5EE-2892-4548-A0CB-D3289CD64D63\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"83F22BF4-A738-438B-8D0B-6993640F0D31\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.1.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D3193B7-8FB9-45E4-BFF6-891A3F14F021\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.1.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5AF269AE-121B-4982-A765-5C7E806FA9FD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.1.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A1C9F604-7FBE-4759-B039-8F5894574203\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.1.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"191821CD-E4CB-4269-B04C-284A9F9783B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.1.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B2A71474-958D-4689-A652-3E2A731F47FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"38169043-17DF-4CF9-963A-8770B8882357\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0D7E5D9C-0976-4C9A-9FEB-AB923845BAD6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C4537676-A72E-4433-B44F-3664EDD6F240\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.2.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D7CCCB66-C7CC-4E5C-8253-C29D57BE9B43\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.2.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8D090B10-68F2-424D-8234-2A280AA96B59\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.2.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"23168B77-645D-4A2A-A6E3-7001104064A4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4D085B16-3116-423F-BDE0-2D93E12650A8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C59247E9-CDAE-4269-A8E4-F49F617CDD23\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A6019C0C-E9DD-4831-8E6A-785AE1A930FD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16F9CF15-8789-49B6-BB6D-B784C8FF20ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A6DAE798-14C9-4CB6-A39F-69CDF9D8FBB0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C51E0C88-B19C-408D-AC17-10CE7462D48A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7A7FBFAA-263C-4B7B-A135-9824DFD8CCDA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2AC41482-B3BC-4C93-A850-73A179BAB763\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ADC80BE1-28A6-4348-A061-8FD9C805E945\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D8EF703-AE06-4DD7-9235-2D8CCDB24F96\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9A8AC314-065B-4BC3-A5EE-CA6D3006F9F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.3.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D8201FF6-53A8-4850-A2B2-47AA65B2CB75\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AFB33002-E5C6-4573-BC94-647DDE4E6F89\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8D7D245A-D983-40AD-89A7-0EA00D38D570\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7223691-225D-4649-B410-F41D2C489BA5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DA9E7F22-5BC4-4AD5-A630-25947CC1E5B7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D6B3DBF9-52EB-4741-85E4-E68645BD81E2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.6.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"350A6845-77D6-4D63-A13C-5DAB55F98727\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.6.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8A456D12-C43A-47B0-AC0D-BF02AEBA0828\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:gnutls:2.7.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B5E7C27-A5D9-4ABD-AFC5-5367083F387F\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.\"}, {\"lang\": \"es\", \"value\": \"La librer\\u00eda Network Security Services (NSS) en versiones anteriores a 3.12.3, como se utiliza en Firefox; GnuTLS en versiones anteriores a 2.6.4 y 2.7.4; OpenSSL 0.9.8 hasta la versi\\u00f3n 0.9.8k; y otros productos que soportan MD2 con certificados X.509, lo que podr\\u00edan permitir a atacantes remotos falsificar certificados usando defectos de dise\\u00f1o de MD2 para generar una colisi\\u00f3n de hash en menos que tiempo que con fuerza bruta. NOTA: el alcance de este problema est\\u00e1 actualmente limitado porque la cantidad de computaci\\u00f3n requerida es todav\\u00eda grande.\"}]",
"id": "CVE-2009-2409",
"lastModified": "2024-11-21T01:04:48.300",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:H/Au:N/C:P/I:P/A:P\", \"baseScore\": 5.1, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"HIGH\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 4.9, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2009-07-30T19:30:00.343",
"references": "[{\"url\": \"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://java.sun.com/javase/6/webnotes/6u17.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/36139\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/36157\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/36434\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/36669\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/36739\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/37386\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/42467\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200911-02.xml\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200912-01.xml\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://support.apple.com/kb/HT3937\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.debian.org/security/2009/dsa-1874\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2009:258\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2009-1207.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2009-1432.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/archive/1/515055/100/0/threaded\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securitytracker.com/id?1022631\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.ubuntu.com/usn/usn-810-1\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.vmware.com/security/advisories/VMSA-2010-0019.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.vupen.com/english/advisories/2009/2085\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2009/3184\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2010/3126\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://rhn.redhat.com/errata/RHSA-2010-0095.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://usn.ubuntu.com/810-2/\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.debian.org/security/2009/dsa-1888\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://java.sun.com/javase/6/webnotes/6u17.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/36139\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/36157\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/36434\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/36669\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/36739\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/37386\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/42467\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200911-02.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200912-01.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://support.apple.com/kb/HT3937\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2009/dsa-1874\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2009:258\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2009-1207.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2009-1432.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/archive/1/515055/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id?1022631\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ubuntu.com/usn/usn-810-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vmware.com/security/advisories/VMSA-2010-0019.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vupen.com/english/advisories/2009/2085\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2009/3184\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2010/3126\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://rhn.redhat.com/errata/RHSA-2010-0095.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://usn.ubuntu.com/810-2/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.debian.org/security/2009/dsa-1888\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-310\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2009-2409\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2009-07-30T19:30:00.343\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.\"},{\"lang\":\"es\",\"value\":\"La librer\u00eda Network Security Services (NSS) en versiones anteriores a 3.12.3, como se utiliza en Firefox; GnuTLS en versiones anteriores a 2.6.4 y 2.7.4; OpenSSL 0.9.8 hasta la versi\u00f3n 0.9.8k; y otros productos que soportan MD2 con certificados X.509, lo que podr\u00edan permitir a atacantes remotos falsificar certificados usando defectos de dise\u00f1o de MD2 para generar una colisi\u00f3n de hash en menos que tiempo que con fuerza bruta. NOTA: el alcance de este problema est\u00e1 actualmente limitado porque la cantidad de computaci\u00f3n requerida es todav\u00eda grande.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:P/I:P/A:P\",\"baseScore\":5.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":4.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.6.4\",\"matchCriteriaId\":\"3306EB88-CE4C-4D5E-BE35-53DE6DEC5C3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.7.0\",\"versionEndExcluding\":\"2.7.4\",\"matchCriteriaId\":\"66221847-4F1D-4F26-8916-731BDFE5B3A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.12.3\",\"matchCriteriaId\":\"A21F310D-7D9F-45D7-974D-C615F99FBEB8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"0.9.8\",\"versionEndIncluding\":\"0.9.8k\",\"matchCriteriaId\":\"06458D9A-4AB2-4B8A-8902-D2A285801347\"}]}]}],\"references\":[{\"url\":\"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://java.sun.com/javase/6/webnotes/6u17.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/36139\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/36157\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/36434\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/36669\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/36739\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/37386\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/42467\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200911-02.xml\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200912-01.xml\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT3937\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.debian.org/security/2009/dsa-1874\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2009:258\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-1207.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-1432.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/515055/100/0/threaded\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id?1022631\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.ubuntu.com/usn/usn-810-1\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2010-0019.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/2085\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/3184\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2010/3126\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://rhn.redhat.com/errata/RHSA-2010-0095.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/810-2/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://www.debian.org/security/2009/dsa-1888\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://java.sun.com/javase/6/webnotes/6u17.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/36139\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/36157\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/36434\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/36669\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/36739\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/37386\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/42467\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200911-02.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200912-01.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT3937\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.debian.org/security/2009/dsa-1874\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2009:258\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-1207.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-1432.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/515055/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id?1022631\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.ubuntu.com/usn/usn-810-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2010-0019.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/2085\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/3184\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2010/3126\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://rhn.redhat.com/errata/RHSA-2010-0095.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/810-2/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://www.debian.org/security/2009/dsa-1888\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]}]}}"
}
}
CERTA-2009-AVI-392
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité dans OpenSSL sous Debian permet à un utilisateur distant d'usurper un certificat arbitraire.
Description
La version d'OpenSSL mise en œuvre sous Debian autorise l'utilisation de certificats signés au moyen de condensats MD2. Or, l'algorithme MD2 est considéré comme non-sûr d'un point de vue cryptographique. De, ce fait, il est possible à un utilisateur malintentionné d'usurper un certificat arbitraire qu'il aura signé en utilisant un condensat de ce type.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Debian 5.0.",
"product": {
"name": "N/A",
"vendor": {
"name": "Debian",
"scada": false
}
}
},
{
"description": "Debian 4.0 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Debian",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nLa version d\u0027OpenSSL mise en \u0153uvre sous Debian autorise l\u0027utilisation de\ncertificats sign\u00e9s au moyen de condensats MD2. Or, l\u0027algorithme MD2 est\nconsid\u00e9r\u00e9 comme non-s\u00fbr d\u0027un point de vue cryptographique. De, ce fait,\nil est possible \u00e0 un utilisateur malintentionn\u00e9 d\u0027usurper un certificat\narbitraire qu\u0027il aura sign\u00e9 en utilisant un condensat de ce type.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA 1888 du 15 septembre 2009 :",
"url": "http://www.debian.org/security/2009/dsa-1888"
}
],
"reference": "CERTA-2009-AVI-392",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-09-18T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 dans OpenSSL sous Debian permet \u00e0 un utilisateur\ndistant d\u0027usurper un certificat arbitraire.\n",
"title": "Vuln\u00e9rabilit\u00e9 de OpenSSL sous Debian",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1888 du 15 septembre 2009",
"url": null
}
]
}
CERTA-2010-AVI-008
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités dans VMware ESX permettent, entre autre, à une personne malintentionnée d'exécuter du code arbitraire à distance
Description
De multiples vulnérabilités, non documentées, dans VMware ESX permettent, entre autre, à une personne distante malintentionnée d'exécuter du code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
VMware ESX 4.0 sans le correctif ESX400-200912403-SG.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eVMware ESX 4.0 sans le correctif ESX400-200912403-SG.\u003c/P\u003e",
"content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s, non document\u00e9es, dans VMware ESX\npermettent, entre autre, \u00e0 une personne distante malintentionn\u00e9e\nd\u0027ex\u00e9cuter du code arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-3375",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3375"
},
{
"name": "CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"name": "CVE-2009-3380",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3380"
},
{
"name": "CVE-2009-3382",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3382"
},
{
"name": "CVE-2009-3274",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3274"
},
{
"name": "CVE-2009-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2404"
},
{
"name": "CVE-2009-3372",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3372"
},
{
"name": "CVE-2009-3376",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3376"
},
{
"name": "CVE-2009-1563",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1563"
},
{
"name": "CVE-2009-3373",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3373"
},
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"name": "CVE-2009-3374",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3374"
},
{
"name": "CVE-2009-3370",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3370"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2010-0001 du 06 janvier 2010 :",
"url": "http://lists.vmware.com/pipermail/security-announce/2010/000075.html"
}
],
"reference": "CERTA-2010-AVI-008",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2010-01-08T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans VMware ESX permettent, entre autre, \u00e0 une\npersonne malintentionn\u00e9e d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance\n",
"title": "Mulitples vuln\u00e9rabilit\u00e9s dans VMware ESX",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2010-0001 du 06 janvier 2010",
"url": null
}
]
}
CERTA-2011-AVI-032
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités sont présentes dans syslog-ng. Elles permettent de contourner la politique de sécurité ou de provoquer un déni de service à distance.
Description
Plusieurs vulnérabilités sont présentes dans syslog-ng.
L'une d'elles permet de contourner la politique de sécurité en raison d'un mauvais positionnement des droits d'accès sur des fichiers.
Les autres sont exploitables pour provoquer un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
syslog-ng Open Source Edition :
- versions 3.0.x antérieures à la version 3.0.10 ;
- versions 3.1.x antérieures à la version 3.1.4 ;
- versions 3.2.x antérieures à la version 3.2.2.
syslog-ng Premium Edition :
- versions 3.0.x antérieures à la version 3.0.6a ;
- versions 3.2.x antérieures à la version 3.2.1a.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003esyslog-ng Open Source Edition : \u003cUL\u003e \u003cLI\u003eversions 3.0.x ant\u00e9rieures \u00e0 la version 3.0.10 ;\u003c/LI\u003e \u003cLI\u003eversions 3.1.x ant\u00e9rieures \u00e0 la version 3.1.4 ;\u003c/LI\u003e \u003cLI\u003eversions 3.2.x ant\u00e9rieures \u00e0 la version 3.2.2.\u003c/LI\u003e \u003c/UL\u003e \u003cP\u003esyslog-ng Premium Edition :\u003c/P\u003e \u003cUL\u003e \u003cLI\u003eversions 3.0.x ant\u00e9rieures \u00e0 la version 3.0.6a ;\u003c/LI\u003e \u003cLI\u003eversions 3.2.x ant\u00e9rieures \u00e0 la version 3.2.1a.\u003c/LI\u003e \u003c/UL\u003e\u003c/p\u003e",
"content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans syslog-ng.\n\nL\u0027une d\u0027elles permet de contourner la politique de s\u00e9curit\u00e9 en raison\nd\u0027un mauvais positionnement des droits d\u0027acc\u00e8s sur des fichiers.\n\nLes autres sont exploitables pour provoquer un d\u00e9ni de service \u00e0\ndistance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2010-0433",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0433"
},
{
"name": "CVE-2010-0742",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0742"
},
{
"name": "CVE-2011-0343",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-0343"
},
{
"name": "CVE-2009-3245",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3245"
},
{
"name": "CVE-2010-0740",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0740"
},
{
"name": "CVE-2009-0590",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0590"
},
{
"name": "CVE-2010-3864",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-3864"
},
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
}
],
"links": [
{
"title": "Annonces des versions de syslog-ng du 14 janvier 2011 :",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000103.html"
},
{
"title": "Annonces des versions de syslog-ng du 14 janvier 2011 :",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000104.html"
},
{
"title": "Annonces des versions de syslog-ng du 16 janvier 2011 :",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000105.html"
},
{
"title": "Annonces des versions de syslog-ng du 07 janvier 2011 :",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
},
{
"title": "Annonces des versions de syslog-ng du 07 janvier 2011 :",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
}
],
"reference": "CERTA-2011-AVI-032",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2011-01-26T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans syslog-ng. Elles permettent\nde contourner la politique de s\u00e9curit\u00e9 ou de provoquer un d\u00e9ni de\nservice \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9s dans syslog-ng",
"vendor_advisories": [
{
"published_at": null,
"title": "Annonces des versions de syslog-ng des 07, 14 et 16 janvier 2011",
"url": null
}
]
}
CERTA-2010-AVI-583
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités affectant différents logiciels inclus dans VMware ESX Console OS ont été corrigées.
Description
Plusieurs logiciels vulnérables inclus dans VMware ESX Console OS ont été mis à jour par l'éditeur :
- Samba est mis à jour pour corriger une vulnérabilité permettant à un utilisateur malveillant distant de provoquer un déni de service et potentiellement de l'exécution de code arbitraire (CVE-2010-3069) ;
- bzip2 est mis à jour pour corriger une vulnérabilité permettant à un attaquant d'exécuter du code arbitraire à l'aide d'un fichier spécialement conçu (CVE-2010-0405) ;
- OpenSSL est mis à jour pour corriger plusieurs vulnérabilités permettant de contourner la politique de sécurité (CVE-2009-0590, CVE-2009-2409 et CVE-2009-355).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "VMware ESX 3.x Console OS (COS).",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX 4.x Console OS (COS) ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nPlusieurs logiciels vuln\u00e9rables inclus dans VMware ESX Console OS ont\n\u00e9t\u00e9 mis \u00e0 jour par l\u0027\u00e9diteur :\n\n- Samba est mis \u00e0 jour pour corriger une vuln\u00e9rabilit\u00e9 permettant \u00e0 un\n utilisateur malveillant distant de provoquer un d\u00e9ni de service et\n potentiellement de l\u0027ex\u00e9cution de code arbitraire (CVE-2010-3069) ;\n- bzip2 est mis \u00e0 jour pour corriger une vuln\u00e9rabilit\u00e9 permettant \u00e0 un\n attaquant d\u0027ex\u00e9cuter du code arbitraire \u00e0 l\u0027aide d\u0027un fichier\n sp\u00e9cialement con\u00e7u (CVE-2010-0405) ;\n- OpenSSL est mis \u00e0 jour pour corriger plusieurs vuln\u00e9rabilit\u00e9s\n permettant de contourner la politique de s\u00e9curit\u00e9 (CVE-2009-0590,\n CVE-2009-2409 et CVE-2009-355).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-3555",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3555"
},
{
"name": "CVE-2010-0405",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0405"
},
{
"name": "CVE-2009-0590",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0590"
},
{
"name": "CVE-2010-3069",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-3069"
},
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2010-0019 du 07 d\u00e9cembre 2010 :",
"url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
}
],
"reference": "CERTA-2010-AVI-583",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2010-12-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s affectant diff\u00e9rents logiciels inclus dans\nVMware ESX Console OS ont \u00e9t\u00e9 corrig\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans VMware ESX",
"vendor_advisories": [
{
"published_at": null,
"title": "Avis de s\u00e9curit\u00e9 VMware VMSA-2010-0019 du 07 d\u00e9cembre 2010",
"url": null
}
]
}
CERTA-2009-AVI-487
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités dans Apple MacOS X permettent entre autres l'exécution de code arbitraire à distance.
Description
L'éditeur Apple a publié un ensemble de correctifs pour les applications livrées avec son système d'exploitation Mac OS X. L'exploitation des vulnérabilités par une personne malintentionnée pourrait permettre, entre autres, l'exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Mac OS X 10.5 ;",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Mac OS X 10.6 ;",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Mac OS X Server 10.5 ;",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Mac OS X Server 10.6.",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nL\u0027\u00e9diteur Apple a publi\u00e9 un ensemble de correctifs pour les applications\nlivr\u00e9es avec son syst\u00e8me d\u0027exploitation Mac OS X. L\u0027exploitation des\nvuln\u00e9rabilit\u00e9s par une personne malintentionn\u00e9e pourrait permettre,\nentre autres, l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-2832",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2832"
},
{
"name": "CVE-2009-3293",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3293"
},
{
"name": "CVE-2009-2820",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2820"
},
{
"name": "CVE-2009-1890",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1890"
},
{
"name": "CVE-2009-3292",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3292"
},
{
"name": "CVE-2009-2839",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2839"
},
{
"name": "CVE-2009-2825",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2825"
},
{
"name": "CVE-2009-2810",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2810"
},
{
"name": "CVE-2009-2411",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2411"
},
{
"name": "CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"name": "CVE-2009-2416",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2416"
},
{
"name": "CVE-2009-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2798"
},
{
"name": "CVE-2007-6698",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6698"
},
{
"name": "CVE-2009-2833",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2833"
},
{
"name": "CVE-2009-2203",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2203"
},
{
"name": "CVE-2009-2823",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2823"
},
{
"name": "CVE-2009-2840",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2840"
},
{
"name": "CVE-2009-2824",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2824"
},
{
"name": "CVE-2009-2819",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2819"
},
{
"name": "CVE-2009-1891",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1891"
},
{
"name": "CVE-2009-0023",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0023"
},
{
"name": "CVE-2009-2838",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2838"
},
{
"name": "CVE-2009-1632",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1632"
},
{
"name": "CVE-2009-2818",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2818"
},
{
"name": "CVE-2009-1956",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1956"
},
{
"name": "CVE-2007-5707",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5707"
},
{
"name": "CVE-2008-0658",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0658"
},
{
"name": "CVE-2009-2412",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2412"
},
{
"name": "CVE-2009-1195",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1195"
},
{
"name": "CVE-2009-1191",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1191"
},
{
"name": "CVE-2009-2808",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2808"
},
{
"name": "CVE-2009-2830",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2830"
},
{
"name": "CVE-2008-5161",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5161"
},
{
"name": "CVE-2009-3111",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3111"
},
{
"name": "CVE-2009-2829",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2829"
},
{
"name": "CVE-2009-2826",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2826"
},
{
"name": "CVE-2009-2414",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2414"
},
{
"name": "CVE-2009-2285",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2285"
},
{
"name": "CVE-2009-3291",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3291"
},
{
"name": "CVE-2009-2837",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2837"
},
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"name": "CVE-2009-2836",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2836"
},
{
"name": "CVE-2009-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2799"
},
{
"name": "CVE-2009-1574",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1574"
},
{
"name": "CVE-2009-2835",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2835"
},
{
"name": "CVE-2009-2831",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2831"
},
{
"name": "CVE-2009-3235",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3235"
},
{
"name": "CVE-2009-1955",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1955"
},
{
"name": "CVE-2009-2828",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2828"
},
{
"name": "CVE-2009-2202",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2202"
}
],
"links": [],
"reference": "CERTA-2009-AVI-487",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-11-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s dans Apple MacOS X permettent entre autres\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple MacOS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT3937 du 09 novembre 2009",
"url": "http://docs.info.apple.com/article.html?artnum=HT3937"
}
]
}
CERTA-2010-AVI-461
Vulnerability from certfr_avis - Published: - Updated:
De nombreuses vulnérabilités affectant différents logiciels inclus dans VMware ESX Console OS ont été corrigées.
Description
Plusieurs logiciels vulnérables inclus dans VMware ESX Console OS ont été mis à jour par l'éditeur :
- le composant NSS_db est mis à jour pour corriger une vulnérabilité permettant à un utilisateur malveillant d'accéder à des données confidentielles (CVE-2010-0826) ;
- une mise à jour du composant OpenLDAP corrige un erreur dans la gestion du Common Name d'un certificat X.509, qui permet une attaque du type « homme au milieu » (CVE-2009-3767) ;
- la bibliothèque libcurl est mise à jour afin de corriger une vulnérabilité permettant à un attaquant d'effectuer à distance un déni de service par arrêt inopiné (CVE-2010-0734) ;
- le logiciel sudo est mis à jour pour corriger une erreur concernant la gestion d'une variable d'environnement permettant à un utilisateur malveillant d'élever ses privilèges (CVE-2010-1646) ;
- une mise à jour groupée des composants OpenSSL, GnuTLS, NSS et NSPR corrige différentes vulnérabilités permettant entre autres un déni de service et l'élévation de privilèges (CVE-2009-3555, CVE-2009-2409, CVE-2009-3245 et CVE-2010-0433).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
VMware ESX 4.0 Console OS (COS).
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eVMware ESX 4.0 Console OS (COS).\u003c/p\u003e",
"content": "## Description\n\nPlusieurs logiciels vuln\u00e9rables inclus dans VMware ESX Console OS ont\n\u00e9t\u00e9 mis \u00e0 jour par l\u0027\u00e9diteur :\n\n- le composant NSS_db est mis \u00e0 jour pour corriger une vuln\u00e9rabilit\u00e9\n permettant \u00e0 un utilisateur malveillant d\u0027acc\u00e9der \u00e0 des donn\u00e9es\n confidentielles (CVE-2010-0826) ;\n- une mise \u00e0 jour du composant OpenLDAP corrige un erreur dans la\n gestion du Common Name d\u0027un certificat X.509, qui permet une attaque\n du type \u00ab homme au milieu \u00bb (CVE-2009-3767) ;\n- la biblioth\u00e8que libcurl est mise \u00e0 jour afin de corriger une\n vuln\u00e9rabilit\u00e9 permettant \u00e0 un attaquant d\u0027effectuer \u00e0 distance un\n d\u00e9ni de service par arr\u00eat inopin\u00e9 (CVE-2010-0734) ;\n- le logiciel sudo est mis \u00e0 jour pour corriger une erreur concernant\n la gestion d\u0027une variable d\u0027environnement permettant \u00e0 un\n utilisateur malveillant d\u0027\u00e9lever ses privil\u00e8ges (CVE-2010-1646) ;\n- une mise \u00e0 jour group\u00e9e des composants OpenSSL, GnuTLS, NSS et NSPR\n corrige diff\u00e9rentes vuln\u00e9rabilit\u00e9s permettant entre autres un d\u00e9ni\n de service et l\u0027\u00e9l\u00e9vation de privil\u00e8ges (CVE-2009-3555,\n CVE-2009-2409, CVE-2009-3245 et CVE-2010-0433).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2010-0433",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0433"
},
{
"name": "CVE-2010-0826",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0826"
},
{
"name": "CVE-2010-0734",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0734"
},
{
"name": "CVE-2009-3767",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3767"
},
{
"name": "CVE-2010-1646",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-1646"
},
{
"name": "CVE-2009-3555",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3555"
},
{
"name": "CVE-2009-3245",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3245"
},
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
}
],
"links": [],
"reference": "CERTA-2010-AVI-461",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2010-10-01T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De nombreuses vuln\u00e9rabilit\u00e9s affectant diff\u00e9rents logiciels inclus dans\n\u003cspan class=\"textit\"\u003eVMware ESX Console OS\u003c/span\u003e ont \u00e9t\u00e9 corrig\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans VMware ESX Server",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMSA-2010-0015 du 30 septembre 2010",
"url": "http://lists.vmware.com/pipermail/security-announce/2010/000106.html"
}
]
}
CERTA-2010-AVI-008
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités dans VMware ESX permettent, entre autre, à une personne malintentionnée d'exécuter du code arbitraire à distance
Description
De multiples vulnérabilités, non documentées, dans VMware ESX permettent, entre autre, à une personne distante malintentionnée d'exécuter du code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
VMware ESX 4.0 sans le correctif ESX400-200912403-SG.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eVMware ESX 4.0 sans le correctif ESX400-200912403-SG.\u003c/P\u003e",
"content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s, non document\u00e9es, dans VMware ESX\npermettent, entre autre, \u00e0 une personne distante malintentionn\u00e9e\nd\u0027ex\u00e9cuter du code arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-3375",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3375"
},
{
"name": "CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"name": "CVE-2009-3380",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3380"
},
{
"name": "CVE-2009-3382",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3382"
},
{
"name": "CVE-2009-3274",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3274"
},
{
"name": "CVE-2009-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2404"
},
{
"name": "CVE-2009-3372",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3372"
},
{
"name": "CVE-2009-3376",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3376"
},
{
"name": "CVE-2009-1563",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1563"
},
{
"name": "CVE-2009-3373",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3373"
},
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"name": "CVE-2009-3374",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3374"
},
{
"name": "CVE-2009-3370",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3370"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2010-0001 du 06 janvier 2010 :",
"url": "http://lists.vmware.com/pipermail/security-announce/2010/000075.html"
}
],
"reference": "CERTA-2010-AVI-008",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2010-01-08T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans VMware ESX permettent, entre autre, \u00e0 une\npersonne malintentionn\u00e9e d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance\n",
"title": "Mulitples vuln\u00e9rabilit\u00e9s dans VMware ESX",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2010-0001 du 06 janvier 2010",
"url": null
}
]
}
CERTA-2009-AVI-392
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité dans OpenSSL sous Debian permet à un utilisateur distant d'usurper un certificat arbitraire.
Description
La version d'OpenSSL mise en œuvre sous Debian autorise l'utilisation de certificats signés au moyen de condensats MD2. Or, l'algorithme MD2 est considéré comme non-sûr d'un point de vue cryptographique. De, ce fait, il est possible à un utilisateur malintentionné d'usurper un certificat arbitraire qu'il aura signé en utilisant un condensat de ce type.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Debian 5.0.",
"product": {
"name": "N/A",
"vendor": {
"name": "Debian",
"scada": false
}
}
},
{
"description": "Debian 4.0 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Debian",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nLa version d\u0027OpenSSL mise en \u0153uvre sous Debian autorise l\u0027utilisation de\ncertificats sign\u00e9s au moyen de condensats MD2. Or, l\u0027algorithme MD2 est\nconsid\u00e9r\u00e9 comme non-s\u00fbr d\u0027un point de vue cryptographique. De, ce fait,\nil est possible \u00e0 un utilisateur malintentionn\u00e9 d\u0027usurper un certificat\narbitraire qu\u0027il aura sign\u00e9 en utilisant un condensat de ce type.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA 1888 du 15 septembre 2009 :",
"url": "http://www.debian.org/security/2009/dsa-1888"
}
],
"reference": "CERTA-2009-AVI-392",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-09-18T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 dans OpenSSL sous Debian permet \u00e0 un utilisateur\ndistant d\u0027usurper un certificat arbitraire.\n",
"title": "Vuln\u00e9rabilit\u00e9 de OpenSSL sous Debian",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1888 du 15 septembre 2009",
"url": null
}
]
}
CERTA-2010-AVI-461
Vulnerability from certfr_avis - Published: - Updated:
De nombreuses vulnérabilités affectant différents logiciels inclus dans VMware ESX Console OS ont été corrigées.
Description
Plusieurs logiciels vulnérables inclus dans VMware ESX Console OS ont été mis à jour par l'éditeur :
- le composant NSS_db est mis à jour pour corriger une vulnérabilité permettant à un utilisateur malveillant d'accéder à des données confidentielles (CVE-2010-0826) ;
- une mise à jour du composant OpenLDAP corrige un erreur dans la gestion du Common Name d'un certificat X.509, qui permet une attaque du type « homme au milieu » (CVE-2009-3767) ;
- la bibliothèque libcurl est mise à jour afin de corriger une vulnérabilité permettant à un attaquant d'effectuer à distance un déni de service par arrêt inopiné (CVE-2010-0734) ;
- le logiciel sudo est mis à jour pour corriger une erreur concernant la gestion d'une variable d'environnement permettant à un utilisateur malveillant d'élever ses privilèges (CVE-2010-1646) ;
- une mise à jour groupée des composants OpenSSL, GnuTLS, NSS et NSPR corrige différentes vulnérabilités permettant entre autres un déni de service et l'élévation de privilèges (CVE-2009-3555, CVE-2009-2409, CVE-2009-3245 et CVE-2010-0433).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
VMware ESX 4.0 Console OS (COS).
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eVMware ESX 4.0 Console OS (COS).\u003c/p\u003e",
"content": "## Description\n\nPlusieurs logiciels vuln\u00e9rables inclus dans VMware ESX Console OS ont\n\u00e9t\u00e9 mis \u00e0 jour par l\u0027\u00e9diteur :\n\n- le composant NSS_db est mis \u00e0 jour pour corriger une vuln\u00e9rabilit\u00e9\n permettant \u00e0 un utilisateur malveillant d\u0027acc\u00e9der \u00e0 des donn\u00e9es\n confidentielles (CVE-2010-0826) ;\n- une mise \u00e0 jour du composant OpenLDAP corrige un erreur dans la\n gestion du Common Name d\u0027un certificat X.509, qui permet une attaque\n du type \u00ab homme au milieu \u00bb (CVE-2009-3767) ;\n- la biblioth\u00e8que libcurl est mise \u00e0 jour afin de corriger une\n vuln\u00e9rabilit\u00e9 permettant \u00e0 un attaquant d\u0027effectuer \u00e0 distance un\n d\u00e9ni de service par arr\u00eat inopin\u00e9 (CVE-2010-0734) ;\n- le logiciel sudo est mis \u00e0 jour pour corriger une erreur concernant\n la gestion d\u0027une variable d\u0027environnement permettant \u00e0 un\n utilisateur malveillant d\u0027\u00e9lever ses privil\u00e8ges (CVE-2010-1646) ;\n- une mise \u00e0 jour group\u00e9e des composants OpenSSL, GnuTLS, NSS et NSPR\n corrige diff\u00e9rentes vuln\u00e9rabilit\u00e9s permettant entre autres un d\u00e9ni\n de service et l\u0027\u00e9l\u00e9vation de privil\u00e8ges (CVE-2009-3555,\n CVE-2009-2409, CVE-2009-3245 et CVE-2010-0433).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2010-0433",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0433"
},
{
"name": "CVE-2010-0826",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0826"
},
{
"name": "CVE-2010-0734",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0734"
},
{
"name": "CVE-2009-3767",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3767"
},
{
"name": "CVE-2010-1646",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-1646"
},
{
"name": "CVE-2009-3555",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3555"
},
{
"name": "CVE-2009-3245",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3245"
},
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
}
],
"links": [],
"reference": "CERTA-2010-AVI-461",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2010-10-01T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De nombreuses vuln\u00e9rabilit\u00e9s affectant diff\u00e9rents logiciels inclus dans\n\u003cspan class=\"textit\"\u003eVMware ESX Console OS\u003c/span\u003e ont \u00e9t\u00e9 corrig\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans VMware ESX Server",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMSA-2010-0015 du 30 septembre 2010",
"url": "http://lists.vmware.com/pipermail/security-announce/2010/000106.html"
}
]
}
CERTA-2011-AVI-032
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités sont présentes dans syslog-ng. Elles permettent de contourner la politique de sécurité ou de provoquer un déni de service à distance.
Description
Plusieurs vulnérabilités sont présentes dans syslog-ng.
L'une d'elles permet de contourner la politique de sécurité en raison d'un mauvais positionnement des droits d'accès sur des fichiers.
Les autres sont exploitables pour provoquer un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
syslog-ng Open Source Edition :
- versions 3.0.x antérieures à la version 3.0.10 ;
- versions 3.1.x antérieures à la version 3.1.4 ;
- versions 3.2.x antérieures à la version 3.2.2.
syslog-ng Premium Edition :
- versions 3.0.x antérieures à la version 3.0.6a ;
- versions 3.2.x antérieures à la version 3.2.1a.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003esyslog-ng Open Source Edition : \u003cUL\u003e \u003cLI\u003eversions 3.0.x ant\u00e9rieures \u00e0 la version 3.0.10 ;\u003c/LI\u003e \u003cLI\u003eversions 3.1.x ant\u00e9rieures \u00e0 la version 3.1.4 ;\u003c/LI\u003e \u003cLI\u003eversions 3.2.x ant\u00e9rieures \u00e0 la version 3.2.2.\u003c/LI\u003e \u003c/UL\u003e \u003cP\u003esyslog-ng Premium Edition :\u003c/P\u003e \u003cUL\u003e \u003cLI\u003eversions 3.0.x ant\u00e9rieures \u00e0 la version 3.0.6a ;\u003c/LI\u003e \u003cLI\u003eversions 3.2.x ant\u00e9rieures \u00e0 la version 3.2.1a.\u003c/LI\u003e \u003c/UL\u003e\u003c/p\u003e",
"content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans syslog-ng.\n\nL\u0027une d\u0027elles permet de contourner la politique de s\u00e9curit\u00e9 en raison\nd\u0027un mauvais positionnement des droits d\u0027acc\u00e8s sur des fichiers.\n\nLes autres sont exploitables pour provoquer un d\u00e9ni de service \u00e0\ndistance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2010-0433",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0433"
},
{
"name": "CVE-2010-0742",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0742"
},
{
"name": "CVE-2011-0343",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-0343"
},
{
"name": "CVE-2009-3245",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3245"
},
{
"name": "CVE-2010-0740",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0740"
},
{
"name": "CVE-2009-0590",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0590"
},
{
"name": "CVE-2010-3864",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-3864"
},
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
}
],
"links": [
{
"title": "Annonces des versions de syslog-ng du 14 janvier 2011 :",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000103.html"
},
{
"title": "Annonces des versions de syslog-ng du 14 janvier 2011 :",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000104.html"
},
{
"title": "Annonces des versions de syslog-ng du 16 janvier 2011 :",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000105.html"
},
{
"title": "Annonces des versions de syslog-ng du 07 janvier 2011 :",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
},
{
"title": "Annonces des versions de syslog-ng du 07 janvier 2011 :",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
}
],
"reference": "CERTA-2011-AVI-032",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2011-01-26T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans syslog-ng. Elles permettent\nde contourner la politique de s\u00e9curit\u00e9 ou de provoquer un d\u00e9ni de\nservice \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9s dans syslog-ng",
"vendor_advisories": [
{
"published_at": null,
"title": "Annonces des versions de syslog-ng des 07, 14 et 16 janvier 2011",
"url": null
}
]
}
CERTA-2010-AVI-583
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités affectant différents logiciels inclus dans VMware ESX Console OS ont été corrigées.
Description
Plusieurs logiciels vulnérables inclus dans VMware ESX Console OS ont été mis à jour par l'éditeur :
- Samba est mis à jour pour corriger une vulnérabilité permettant à un utilisateur malveillant distant de provoquer un déni de service et potentiellement de l'exécution de code arbitraire (CVE-2010-3069) ;
- bzip2 est mis à jour pour corriger une vulnérabilité permettant à un attaquant d'exécuter du code arbitraire à l'aide d'un fichier spécialement conçu (CVE-2010-0405) ;
- OpenSSL est mis à jour pour corriger plusieurs vulnérabilités permettant de contourner la politique de sécurité (CVE-2009-0590, CVE-2009-2409 et CVE-2009-355).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "VMware ESX 3.x Console OS (COS).",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX 4.x Console OS (COS) ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nPlusieurs logiciels vuln\u00e9rables inclus dans VMware ESX Console OS ont\n\u00e9t\u00e9 mis \u00e0 jour par l\u0027\u00e9diteur :\n\n- Samba est mis \u00e0 jour pour corriger une vuln\u00e9rabilit\u00e9 permettant \u00e0 un\n utilisateur malveillant distant de provoquer un d\u00e9ni de service et\n potentiellement de l\u0027ex\u00e9cution de code arbitraire (CVE-2010-3069) ;\n- bzip2 est mis \u00e0 jour pour corriger une vuln\u00e9rabilit\u00e9 permettant \u00e0 un\n attaquant d\u0027ex\u00e9cuter du code arbitraire \u00e0 l\u0027aide d\u0027un fichier\n sp\u00e9cialement con\u00e7u (CVE-2010-0405) ;\n- OpenSSL est mis \u00e0 jour pour corriger plusieurs vuln\u00e9rabilit\u00e9s\n permettant de contourner la politique de s\u00e9curit\u00e9 (CVE-2009-0590,\n CVE-2009-2409 et CVE-2009-355).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-3555",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3555"
},
{
"name": "CVE-2010-0405",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0405"
},
{
"name": "CVE-2009-0590",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0590"
},
{
"name": "CVE-2010-3069",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-3069"
},
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2010-0019 du 07 d\u00e9cembre 2010 :",
"url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
}
],
"reference": "CERTA-2010-AVI-583",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2010-12-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s affectant diff\u00e9rents logiciels inclus dans\nVMware ESX Console OS ont \u00e9t\u00e9 corrig\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans VMware ESX",
"vendor_advisories": [
{
"published_at": null,
"title": "Avis de s\u00e9curit\u00e9 VMware VMSA-2010-0019 du 07 d\u00e9cembre 2010",
"url": null
}
]
}
CERTA-2009-AVI-487
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités dans Apple MacOS X permettent entre autres l'exécution de code arbitraire à distance.
Description
L'éditeur Apple a publié un ensemble de correctifs pour les applications livrées avec son système d'exploitation Mac OS X. L'exploitation des vulnérabilités par une personne malintentionnée pourrait permettre, entre autres, l'exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Mac OS X 10.5 ;",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Mac OS X 10.6 ;",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Mac OS X Server 10.5 ;",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Mac OS X Server 10.6.",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nL\u0027\u00e9diteur Apple a publi\u00e9 un ensemble de correctifs pour les applications\nlivr\u00e9es avec son syst\u00e8me d\u0027exploitation Mac OS X. L\u0027exploitation des\nvuln\u00e9rabilit\u00e9s par une personne malintentionn\u00e9e pourrait permettre,\nentre autres, l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-2832",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2832"
},
{
"name": "CVE-2009-3293",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3293"
},
{
"name": "CVE-2009-2820",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2820"
},
{
"name": "CVE-2009-1890",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1890"
},
{
"name": "CVE-2009-3292",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3292"
},
{
"name": "CVE-2009-2839",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2839"
},
{
"name": "CVE-2009-2825",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2825"
},
{
"name": "CVE-2009-2810",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2810"
},
{
"name": "CVE-2009-2411",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2411"
},
{
"name": "CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"name": "CVE-2009-2416",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2416"
},
{
"name": "CVE-2009-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2798"
},
{
"name": "CVE-2007-6698",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6698"
},
{
"name": "CVE-2009-2833",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2833"
},
{
"name": "CVE-2009-2203",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2203"
},
{
"name": "CVE-2009-2823",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2823"
},
{
"name": "CVE-2009-2840",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2840"
},
{
"name": "CVE-2009-2824",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2824"
},
{
"name": "CVE-2009-2819",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2819"
},
{
"name": "CVE-2009-1891",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1891"
},
{
"name": "CVE-2009-0023",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0023"
},
{
"name": "CVE-2009-2838",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2838"
},
{
"name": "CVE-2009-1632",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1632"
},
{
"name": "CVE-2009-2818",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2818"
},
{
"name": "CVE-2009-1956",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1956"
},
{
"name": "CVE-2007-5707",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5707"
},
{
"name": "CVE-2008-0658",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0658"
},
{
"name": "CVE-2009-2412",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2412"
},
{
"name": "CVE-2009-1195",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1195"
},
{
"name": "CVE-2009-1191",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1191"
},
{
"name": "CVE-2009-2808",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2808"
},
{
"name": "CVE-2009-2830",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2830"
},
{
"name": "CVE-2008-5161",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5161"
},
{
"name": "CVE-2009-3111",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3111"
},
{
"name": "CVE-2009-2829",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2829"
},
{
"name": "CVE-2009-2826",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2826"
},
{
"name": "CVE-2009-2414",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2414"
},
{
"name": "CVE-2009-2285",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2285"
},
{
"name": "CVE-2009-3291",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3291"
},
{
"name": "CVE-2009-2837",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2837"
},
{
"name": "CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"name": "CVE-2009-2836",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2836"
},
{
"name": "CVE-2009-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2799"
},
{
"name": "CVE-2009-1574",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1574"
},
{
"name": "CVE-2009-2835",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2835"
},
{
"name": "CVE-2009-2831",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2831"
},
{
"name": "CVE-2009-3235",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3235"
},
{
"name": "CVE-2009-1955",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1955"
},
{
"name": "CVE-2009-2828",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2828"
},
{
"name": "CVE-2009-2202",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2202"
}
],
"links": [],
"reference": "CERTA-2009-AVI-487",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-11-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s dans Apple MacOS X permettent entre autres\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple MacOS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT3937 du 09 novembre 2009",
"url": "http://docs.info.apple.com/article.html?artnum=HT3937"
}
]
}
RHSA-2009_1207
Vulnerability from csaf_redhat - Published: 2009-08-12 14:31 - Updated: 2024-11-22 03:00Summary
Red Hat Security Advisory: nspr and nss security update
Notes
Topic
Updated nspr and nss packages that fix security issues are now available
for Red Hat Enterprise Linux 5.2 Extended Update Support.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities. These facilities include threads, thread
synchronization, normal file and network I/O, interval timing, calendar
time, basic memory management (malloc and free), and shared library linking.
Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications. Applications built with NSS can support SSLv2, SSLv3, TLS,
and other security standards.
These updated packages upgrade NSS from the previous version, 3.12.2, to a
prerelease of version 3.12.4. The version of NSPR has also been upgraded
from 4.7.3 to 4.7.4.
Moxie Marlinspike reported a heap overflow flaw in a regular expression
parser in the NSS library used by browsers such as Mozilla Firefox to match
common names in certificates. A malicious website could present a
carefully-crafted certificate in such a way as to trigger the heap
overflow, leading to a crash or, possibly, arbitrary code execution with
the permissions of the user running the browser. (CVE-2009-2404)
Note: in order to exploit this issue without further user interaction in
Firefox, the carefully-crafted certificate would need to be signed by a
Certificate Authority trusted by Firefox, otherwise Firefox presents the
victim with a warning that the certificate is untrusted. Only if the user
then accepts the certificate will the overflow take place.
Dan Kaminsky discovered flaws in the way browsers such as Firefox handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
Firefox, the attacker could use the certificate during a man-in-the-middle
attack and potentially confuse Firefox into accepting it by mistake.
(CVE-2009-2408)
Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
now disables the use of MD2 and MD4 algorithms inside signatures by
default. (CVE-2009-2409)
All users of nspr and nss are advised to upgrade to these updated packages,
which resolve these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated nspr and nss packages that fix security issues are now available\nfor Red Hat Enterprise Linux 5.2 Extended Update Support.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Netscape Portable Runtime (NSPR) provides platform independence for non-GUI\noperating system facilities. These facilities include threads, thread\nsynchronization, normal file and network I/O, interval timing, calendar\ntime, basic memory management (malloc and free), and shared library linking.\n\nNetwork Security Services (NSS) is a set of libraries designed to support\nthe cross-platform development of security-enabled client and server\napplications. Applications built with NSS can support SSLv2, SSLv3, TLS,\nand other security standards.\n\nThese updated packages upgrade NSS from the previous version, 3.12.2, to a\nprerelease of version 3.12.4. The version of NSPR has also been upgraded\nfrom 4.7.3 to 4.7.4.\n\nMoxie Marlinspike reported a heap overflow flaw in a regular expression\nparser in the NSS library used by browsers such as Mozilla Firefox to match\ncommon names in certificates. A malicious website could present a\ncarefully-crafted certificate in such a way as to trigger the heap\noverflow, leading to a crash or, possibly, arbitrary code execution with\nthe permissions of the user running the browser. (CVE-2009-2404)\n\nNote: in order to exploit this issue without further user interaction in\nFirefox, the carefully-crafted certificate would need to be signed by a\nCertificate Authority trusted by Firefox, otherwise Firefox presents the\nvictim with a warning that the certificate is untrusted. Only if the user\nthen accepts the certificate will the overflow take place.\n\nDan Kaminsky discovered flaws in the way browsers such as Firefox handle\nNULL characters in a certificate. If an attacker is able to get a\ncarefully-crafted certificate signed by a Certificate Authority trusted by\nFirefox, the attacker could use the certificate during a man-in-the-middle\nattack and potentially confuse Firefox into accepting it by mistake.\n(CVE-2009-2408)\n\nDan Kaminsky found that browsers still accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. NSS\nnow disables the use of MD2 and MD4 algorithms inside signatures by\ndefault. (CVE-2009-2409)\n\nAll users of nspr and nss are advised to upgrade to these updated packages,\nwhich resolve these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1207",
"url": "https://access.redhat.com/errata/RHSA-2009:1207"
},
{
"category": "external",
"summary": "http://www.redhat.com/security/updates/classification/#critical",
"url": "http://www.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1207.json"
}
],
"title": "Red Hat Security Advisory: nspr and nss security update",
"tracking": {
"current_release_date": "2024-11-22T03:00:42+00:00",
"generator": {
"date": "2024-11-22T03:00:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2009:1207",
"initial_release_date": "2009-08-12T14:31:00+00:00",
"revision_history": [
{
"date": "2009-08-12T14:31:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-08-12T10:31:10+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T03:00:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product": {
"name": "Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:5.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.ia64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ia64",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.ia64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ia64",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.ia64",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.ia64",
"product_id": "nspr-0:4.7.4-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.i386",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.i386",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.i386",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.i386",
"product_id": "nspr-0:4.7.4-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.i386",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.i386",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc64",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc64",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.ppc64",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.ppc64",
"product_id": "nspr-0:4.7.4-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.ppc",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.ppc",
"product_id": "nspr-0:4.7.4-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.src",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.src",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=src"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.src",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.src",
"product_id": "nspr-0:4.7.4-1.el5_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.s390x",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.s390x",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.s390x",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.s390x",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.s390x",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.s390x",
"product_id": "nspr-0:4.7.4-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.s390",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.s390",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.s390",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.s390",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.s390",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.s390",
"product_id": "nspr-0:4.7.4-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.x86_64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.x86_64",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.x86_64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.x86_64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.x86_64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.x86_64",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.x86_64",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.x86_64",
"product_id": "nspr-0:4.7.4-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.src as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.src",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.src as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.src",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2404",
"discovery_date": "2009-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512912"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss regexp heap overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2404"
},
{
"category": "external",
"summary": "RHBZ#512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2404"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-08-12T14:31:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1207"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "nss regexp heap overflow"
},
{
"cve": "CVE-2009-2408",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510251"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a \u0027\\0\u0027 character in a domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox/nss: doesn\u0027t handle NULL in Common Name properly",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2408"
},
{
"category": "external",
"summary": "RHBZ#510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-08-12T14:31:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1207"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox/nss: doesn\u0027t handle NULL in Common Name properly"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-08-12T14:31:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1207"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
}
]
}
RHSA-2009:1662
Vulnerability from csaf_redhat - Published: 2009-12-11 13:42 - Updated: 2025-11-21 17:35Summary
Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update
Notes
Topic
Updated java-1.5.0-sun packages that correct several security issues are
now available for Red Hat Network Satellite Server 5.1.
This update has been rated as having low security impact by the Red Hat
Security Response Team.
Details
This update corrects several security vulnerabilities in the Sun Java
Runtime Environment shipped as part of Red Hat Network Satellite Server
5.1. In a typical operating environment, these are of low security risk as
the runtime is not used on untrusted applets.
Several flaws were fixed in the Sun Java 5 Runtime Environment.
(CVE-2006-2426, CVE-2008-2086, CVE-2009-1093, CVE-2009-1094, CVE-2009-1095,
CVE-2009-1096, CVE-2009-1098, CVE-2009-1099, CVE-2009-1100, CVE-2009-1103,
CVE-2009-1104, CVE-2009-1107, CVE-2009-2409, CVE-2009-2475, CVE-2009-2625,
CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2675,
CVE-2009-2676, CVE-2009-2689, CVE-2009-3728, CVE-2009-3873, CVE-2009-3876,
CVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,
CVE-2009-3883, CVE-2009-3884)
Note: This is the final update for the java-1.5.0-sun packages, as the Sun
Java SE Release family 5.0 has now reached End of Service Life. An
alternative to Sun Java SE 5.0 is the Java 2 Technology Edition of the
IBM Developer Kit for Linux, which is available from the Satellite 5.1
channels on the Red Hat Network.
For a long term solution, Red Hat advises users to switch from Sun Java SE
5.0 to the Java 2 Technology Edition of the IBM Developer Kit for Linux.
Refer to the Solution section for instructions.
Users of Red Hat Network Satellite Server 5.1 are advised to upgrade to
these updated java-1.5.0-sun packages, which resolve these issues. All
running instances of Sun Java must be restarted for the update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated java-1.5.0-sun packages that correct several security issues are\nnow available for Red Hat Network Satellite Server 5.1.\n\nThis update has been rated as having low security impact by the Red Hat\nSecurity Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "This update corrects several security vulnerabilities in the Sun Java\nRuntime Environment shipped as part of Red Hat Network Satellite Server\n5.1. In a typical operating environment, these are of low security risk as\nthe runtime is not used on untrusted applets.\n\nSeveral flaws were fixed in the Sun Java 5 Runtime Environment.\n(CVE-2006-2426, CVE-2008-2086, CVE-2009-1093, CVE-2009-1094, CVE-2009-1095,\nCVE-2009-1096, CVE-2009-1098, CVE-2009-1099, CVE-2009-1100, CVE-2009-1103,\nCVE-2009-1104, CVE-2009-1107, CVE-2009-2409, CVE-2009-2475, CVE-2009-2625,\nCVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2675,\nCVE-2009-2676, CVE-2009-2689, CVE-2009-3728, CVE-2009-3873, CVE-2009-3876,\nCVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,\nCVE-2009-3883, CVE-2009-3884)\n\nNote: This is the final update for the java-1.5.0-sun packages, as the Sun\nJava SE Release family 5.0 has now reached End of Service Life. An\nalternative to Sun Java SE 5.0 is the Java 2 Technology Edition of the\nIBM Developer Kit for Linux, which is available from the Satellite 5.1\nchannels on the Red Hat Network.\n\nFor a long term solution, Red Hat advises users to switch from Sun Java SE\n5.0 to the Java 2 Technology Edition of the IBM Developer Kit for Linux.\nRefer to the Solution section for instructions.\n\nUsers of Red Hat Network Satellite Server 5.1 are advised to upgrade to\nthese updated java-1.5.0-sun packages, which resolve these issues. All\nrunning instances of Sun Java must be restarted for the update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1662",
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "395481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=395481"
},
{
"category": "external",
"summary": "474556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=474556"
},
{
"category": "external",
"summary": "490167",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490167"
},
{
"category": "external",
"summary": "490168",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490168"
},
{
"category": "external",
"summary": "490169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490169"
},
{
"category": "external",
"summary": "490178",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490178"
},
{
"category": "external",
"summary": "492302",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492302"
},
{
"category": "external",
"summary": "492305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492305"
},
{
"category": "external",
"summary": "492306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492306"
},
{
"category": "external",
"summary": "492308",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492308"
},
{
"category": "external",
"summary": "492312",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492312"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "512896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512896"
},
{
"category": "external",
"summary": "512907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907"
},
{
"category": "external",
"summary": "512914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512914"
},
{
"category": "external",
"summary": "512920",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512920"
},
{
"category": "external",
"summary": "512921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512921"
},
{
"category": "external",
"summary": "513215",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=513215"
},
{
"category": "external",
"summary": "513222",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=513222"
},
{
"category": "external",
"summary": "515890",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=515890"
},
{
"category": "external",
"summary": "530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "533185",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533185"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1662.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update",
"tracking": {
"current_release_date": "2025-11-21T17:35:36+00:00",
"generator": {
"date": "2025-11-21T17:35:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1662",
"initial_release_date": "2009-12-11T13:42:00+00:00",
"revision_history": [
{
"date": "2009-12-11T13:42:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-12-11T08:42:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:35:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product": {
"name": "Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT5.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.1::el4"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
}
],
"category": "architecture",
"name": "i586"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-RHNSAT5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-RHNSAT5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-RHNSAT5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-RHNSAT5.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-2426",
"discovery_date": "2007-11-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "395481"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Untrusted applet causes DoS by filling up disk space",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-2426"
},
{
"category": "external",
"summary": "RHBZ#395481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=395481"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-2426",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-2426"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2426",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2426"
}
],
"release_date": "2006-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Untrusted applet causes DoS by filling up disk space"
},
{
"cve": "CVE-2008-2086",
"discovery_date": "2008-12-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "474556"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka \"Java Web Start File Inclusion\" and CR 6694892.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Java Web Start File Inclusion via System Properties Override",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2086"
},
{
"category": "external",
"summary": "RHBZ#474556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=474556"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2086",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2086"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2086",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2086"
}
],
"release_date": "2008-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Java Web Start File Inclusion via System Properties Override"
},
{
"cve": "CVE-2009-1093",
"discovery_date": "2009-03-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "490167"
}
],
"notes": [
{
"category": "description",
"text": "LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK remote LDAP Denial-Of-Service (6717680)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1093"
},
{
"category": "external",
"summary": "RHBZ#490167",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490167"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1093",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1093"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1093",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1093"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK remote LDAP Denial-Of-Service (6717680)"
},
{
"cve": "CVE-2009-1094",
"discovery_date": "2009-03-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "490168"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK LDAP client remote code execution (6737315)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1094"
},
{
"category": "external",
"summary": "RHBZ#490168",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490168"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1094",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1094"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1094",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1094"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK LDAP client remote code execution (6737315)"
},
{
"cve": "CVE-2009-1095",
"discovery_date": "2009-03-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "490169"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK Pack200 Buffer overflow vulnerability (6792554)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1095"
},
{
"category": "external",
"summary": "RHBZ#490169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1095",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1095"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1095",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1095"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK Pack200 Buffer overflow vulnerability (6792554)"
},
{
"cve": "CVE-2009-1096",
"discovery_date": "2009-03-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "490169"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK Pack200 Buffer overflow vulnerability (6792554)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1096"
},
{
"category": "external",
"summary": "RHBZ#490169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1096",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1096"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK Pack200 Buffer overflow vulnerability (6792554)"
},
{
"cve": "CVE-2009-1098",
"discovery_date": "2009-03-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "490178"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK GIF processing buffer overflow vulnerability (6804998)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1098"
},
{
"category": "external",
"summary": "RHBZ#490178",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490178"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1098",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1098"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1098",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1098"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK GIF processing buffer overflow vulnerability (6804998)"
},
{
"cve": "CVE-2009-1099",
"discovery_date": "2009-03-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492302"
}
],
"notes": [
{
"category": "description",
"text": "Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Type1 font processing buffer overflow vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1099"
},
{
"category": "external",
"summary": "RHBZ#492302",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492302"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1099",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1099"
}
],
"release_date": "2009-03-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK: Type1 font processing buffer overflow vulnerability"
},
{
"cve": "CVE-2009-1100",
"discovery_date": "2009-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492305"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) \"limits on Font creation,\" aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: DoS (disk consumption) via handling of temporary font files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1100"
},
{
"category": "external",
"summary": "RHBZ#492305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492305"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1100",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1100"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1100",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1100"
}
],
"release_date": "2009-03-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: DoS (disk consumption) via handling of temporary font files"
},
{
"cve": "CVE-2009-1103",
"discovery_date": "2009-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492306"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to \"deserializing applets,\" aka CR 6646860.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Files disclosure, arbitrary code execution via \"deserializing applets\" (6646860)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1103"
},
{
"category": "external",
"summary": "RHBZ#492306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1103",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1103"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1103",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1103"
}
],
"release_date": "2009-03-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK: Files disclosure, arbitrary code execution via \"deserializing applets\" (6646860)"
},
{
"cve": "CVE-2009-1104",
"discovery_date": "2009-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492308"
}
],
"notes": [
{
"category": "description",
"text": "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Intended access restrictions bypass via LiveConnect (6724331)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1104"
},
{
"category": "external",
"summary": "RHBZ#492308",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492308"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1104",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1104"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1104",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1104"
}
],
"release_date": "2009-03-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Intended access restrictions bypass via LiveConnect (6724331)"
},
{
"cve": "CVE-2009-1107",
"discovery_date": "2009-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492312"
}
],
"notes": [
{
"category": "description",
"text": "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a \"Swing JLabel HTML parsing vulnerability,\" aka CR 6782871.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Signed applet remote misuse possibility (6782871)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1107"
},
{
"category": "external",
"summary": "RHBZ#492312",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492312"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1107",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1107"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1107"
}
],
"release_date": "2009-03-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Signed applet remote misuse possibility (6782871)"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-2475",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "513215"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2475"
},
{
"category": "external",
"summary": "RHBZ#513215",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=513215"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2475",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2475"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2475",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2475"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)"
},
{
"cve": "CVE-2009-2625",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512921"
}
],
"notes": [
{
"category": "description",
"text": "XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: XML parsing Denial-Of-Service (6845701)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2625"
},
{
"category": "external",
"summary": "RHBZ#512921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512921"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2625",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2625"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: XML parsing Denial-Of-Service (6845701)"
},
{
"cve": "CVE-2009-2670",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512896"
}
],
"notes": [
{
"category": "description",
"text": "The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK Untrusted applet System properties access (6738524)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2670"
},
{
"category": "external",
"summary": "RHBZ#512896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512896"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2670",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2670"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2670",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2670"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK Untrusted applet System properties access (6738524)"
},
{
"cve": "CVE-2009-2671",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512907"
}
],
"notes": [
{
"category": "description",
"text": "The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK Proxy mechanism information leaks (6801071)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2671"
},
{
"category": "external",
"summary": "RHBZ#512907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2671",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2671"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2671",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2671"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK Proxy mechanism information leaks (6801071)"
},
{
"cve": "CVE-2009-2672",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512907"
}
],
"notes": [
{
"category": "description",
"text": "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK Proxy mechanism information leaks (6801071)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2672"
},
{
"category": "external",
"summary": "RHBZ#512907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2672",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2672"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2672",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2672"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK Proxy mechanism information leaks (6801071)"
},
{
"cve": "CVE-2009-2673",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512914"
}
],
"notes": [
{
"category": "description",
"text": "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK proxy mechanism allows non-authorized socket connections (6801497)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2673"
},
{
"category": "external",
"summary": "RHBZ#512914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2673",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2673"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2673",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2673"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK proxy mechanism allows non-authorized socket connections (6801497)"
},
{
"cve": "CVE-2009-2675",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512920"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Java Web Start Buffer unpack200 processing integer overflow (6830335)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2675"
},
{
"category": "external",
"summary": "RHBZ#512920",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512920"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2675",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2675"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2675",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2675"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Java Web Start Buffer unpack200 processing integer overflow (6830335)"
},
{
"cve": "CVE-2009-2676",
"discovery_date": "2009-08-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "515890"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JRE applet launcher vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2676"
},
{
"category": "external",
"summary": "RHBZ#515890",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=515890"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2676",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2676"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.8,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JRE applet launcher vulnerability"
},
{
"cve": "CVE-2009-2689",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "513222"
}
],
"notes": [
{
"category": "description",
"text": "JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JDK13Services grants unnecessary privileges (6777448)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2689"
},
{
"category": "external",
"summary": "RHBZ#513222",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=513222"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2689",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2689"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK JDK13Services grants unnecessary privileges (6777448)"
},
{
"cve": "CVE-2009-3728",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530098"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ICC_Profile file existence detection information leak (6631533)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3728"
},
{
"category": "external",
"summary": "RHBZ#530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3728",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK ICC_Profile file existence detection information leak (6631533)"
},
{
"cve": "CVE-2009-3873",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530053"
}
],
"notes": [
{
"category": "description",
"text": "The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JPEG Image Writer quantization problem (6862968)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3873"
},
{
"category": "external",
"summary": "RHBZ#530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3873",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JPEG Image Writer quantization problem (6862968)"
},
{
"cve": "CVE-2009-3876",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3876"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3876",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3877",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3877"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3877",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3879",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530297"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK GraphicsConfiguration information leak(6822057)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3879"
},
{
"category": "external",
"summary": "RHBZ#530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3879",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK GraphicsConfiguration information leak(6822057)"
},
{
"cve": "CVE-2009-3880",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530296"
}
],
"notes": [
{
"category": "description",
"text": "The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK UI logging information leakage(6664512)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3880"
},
{
"category": "external",
"summary": "RHBZ#530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3880",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3880"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK UI logging information leakage(6664512)"
},
{
"cve": "CVE-2009-3881",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530173"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an \"information leak vulnerability,\" aka Bug Id 6636650.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK resurrected classloaders can still have children (6636650)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3881"
},
{
"category": "external",
"summary": "RHBZ#530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3881",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK resurrected classloaders can still have children (6636650)"
},
{
"cve": "CVE-2009-3882",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657026.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3882"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3882",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3882"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3883",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL\u0026F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657138.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3883"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3883",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3884",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530300"
}
],
"notes": [
{
"category": "description",
"text": "The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK zoneinfo file existence information leak (6824265)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3884"
},
{
"category": "external",
"summary": "RHBZ#530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3884",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK zoneinfo file existence information leak (6824265)"
}
]
}
RHSA-2009:1560
Vulnerability from csaf_redhat - Published: 2009-11-09 15:04 - Updated: 2025-11-21 17:35Summary
Red Hat Security Advisory: java-1.6.0-sun security update
Notes
Topic
Updated java-1.6.0-sun packages that correct several security issues are
now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and
the Sun Java 6 Software Development Kit.
This update fixes several vulnerabilities in the Sun Java 6 Runtime
Environment and the Sun Java 6 Software Development Kit. These
vulnerabilities are summarized on the "Advance notification of Security
Updates for Java SE" page from Sun Microsystems, listed in the References
section. (CVE-2009-2409, CVE-2009-3728, CVE-2009-3729, CVE-2009-3865,
CVE-2009-3866, CVE-2009-3867, CVE-2009-3868, CVE-2009-3869, CVE-2009-3871,
CVE-2009-3872, CVE-2009-3873, CVE-2009-3874, CVE-2009-3875, CVE-2009-3876,
CVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,
CVE-2009-3883, CVE-2009-3884, CVE-2009-3886)
Users of java-1.6.0-sun should upgrade to these updated packages, which
correct these issues. All running instances of Sun Java must be restarted
for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated java-1.6.0-sun packages that correct several security issues are\nnow available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and\nthe Sun Java 6 Software Development Kit.\n\nThis update fixes several vulnerabilities in the Sun Java 6 Runtime\nEnvironment and the Sun Java 6 Software Development Kit. These\nvulnerabilities are summarized on the \"Advance notification of Security\nUpdates for Java SE\" page from Sun Microsystems, listed in the References\nsection. (CVE-2009-2409, CVE-2009-3728, CVE-2009-3729, CVE-2009-3865,\nCVE-2009-3866, CVE-2009-3867, CVE-2009-3868, CVE-2009-3869, CVE-2009-3871,\nCVE-2009-3872, CVE-2009-3873, CVE-2009-3874, CVE-2009-3875, CVE-2009-3876,\nCVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,\nCVE-2009-3883, CVE-2009-3884, CVE-2009-3886)\n\nUsers of java-1.6.0-sun should upgrade to these updated packages, which\ncorrect these issues. All running instances of Sun Java must be restarted\nfor the update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1560",
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "532904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532904"
},
{
"category": "external",
"summary": "532906",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532906"
},
{
"category": "external",
"summary": "532914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532914"
},
{
"category": "external",
"summary": "533211",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533211"
},
{
"category": "external",
"summary": "533212",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533212"
},
{
"category": "external",
"summary": "533214",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533214"
},
{
"category": "external",
"summary": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6",
"url": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "530057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530057"
},
{
"category": "external",
"summary": "530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "530062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530062"
},
{
"category": "external",
"summary": "530063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530063"
},
{
"category": "external",
"summary": "530067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530067"
},
{
"category": "external",
"summary": "530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "533215",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533215"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1560.json"
}
],
"title": "Red Hat Security Advisory: java-1.6.0-sun security update",
"tracking": {
"current_release_date": "2025-11-21T17:35:25+00:00",
"generator": {
"date": "2025-11-21T17:35:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1560",
"initial_release_date": "2009-11-09T15:04:00+00:00",
"revision_history": [
{
"date": "2009-11-09T15:04:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-11-09T10:04:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:35:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 4 Extras",
"product": {
"name": "Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i586"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-3728",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530098"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ICC_Profile file existence detection information leak (6631533)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3728"
},
{
"category": "external",
"summary": "RHBZ#530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3728",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK ICC_Profile file existence detection information leak (6631533)"
},
{
"cve": "CVE-2009-3729",
"discovery_date": "2009-11-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "532904"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before Update 22 and 6 before Update 17 allows remote attackers to cause a denial of service (application crash) via a certain test suite, aka Bug Id 6815780.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JRE TrueType font parsing crash (6815780)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3729"
},
{
"category": "external",
"summary": "RHBZ#532904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532904"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3729",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3729"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JRE TrueType font parsing crash (6815780)"
},
{
"cve": "CVE-2009-3865",
"discovery_date": "2009-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533211"
}
],
"notes": [
{
"category": "description",
"text": "The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary commands via a crafted web page, aka Bug Id 6869752.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: ACE in JRE Deployment Toolkit (6869752)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3865"
},
{
"category": "external",
"summary": "RHBZ#533211",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533211"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3865",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3865"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3865",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3865"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "java-1.6.0-sun: ACE in JRE Deployment Toolkit (6869752)"
},
{
"cve": "CVE-2009-3866",
"discovery_date": "2009-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533212"
}
],
"notes": [
{
"category": "description",
"text": "The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers to execute arbitrary code by modifying a certain JNLP file to have a URL field that points to an unintended trusted application, aka Bug Id 6872824.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: Privilege escalation in the Java Web Start Installer (6872824)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3866"
},
{
"category": "external",
"summary": "RHBZ#533212",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533212"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3866",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3866"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3866",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3866"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-1.6.0-sun: Privilege escalation in the Java Web Start Installer (6872824)"
},
{
"cve": "CVE-2009-3867",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2009-11-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533214"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3867"
},
{
"category": "external",
"summary": "RHBZ#533214",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533214"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3867",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3867"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3867",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3867"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)"
},
{
"cve": "CVE-2009-3868",
"discovery_date": "2009-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533215"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3868"
},
{
"category": "external",
"summary": "RHBZ#533215",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533215"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3868",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3868"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970)"
},
{
"cve": "CVE-2009-3869",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530062"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3869"
},
{
"category": "external",
"summary": "RHBZ#530062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3869",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)"
},
{
"cve": "CVE-2009-3871",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530063"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3871"
},
{
"category": "external",
"summary": "RHBZ#530063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530063"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3871",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)"
},
{
"cve": "CVE-2009-3872",
"discovery_date": "2009-11-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "532906"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JRE JPEG JFIF Decoder issue (6862969)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3872"
},
{
"category": "external",
"summary": "RHBZ#532906",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532906"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3872",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3872"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3872",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3872"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "JRE JPEG JFIF Decoder issue (6862969)"
},
{
"cve": "CVE-2009-3873",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530053"
}
],
"notes": [
{
"category": "description",
"text": "The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JPEG Image Writer quantization problem (6862968)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3873"
},
{
"category": "external",
"summary": "RHBZ#530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3873",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JPEG Image Writer quantization problem (6862968)"
},
{
"cve": "CVE-2009-3874",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530067"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ImageI/O JPEG heap overflow (6874643)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3874"
},
{
"category": "external",
"summary": "RHBZ#530067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530067"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3874",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK ImageI/O JPEG heap overflow (6874643)"
},
{
"cve": "CVE-2009-3875",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530057"
}
],
"notes": [
{
"category": "description",
"text": "The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to \"timing attack vulnerabilities,\" aka Bug Id 6863503.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3875"
},
{
"category": "external",
"summary": "RHBZ#530057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530057"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3875",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3875"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)"
},
{
"cve": "CVE-2009-3876",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3876"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3876",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3877",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3877"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3877",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3879",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530297"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK GraphicsConfiguration information leak(6822057)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3879"
},
{
"category": "external",
"summary": "RHBZ#530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3879",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK GraphicsConfiguration information leak(6822057)"
},
{
"cve": "CVE-2009-3880",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530296"
}
],
"notes": [
{
"category": "description",
"text": "The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK UI logging information leakage(6664512)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3880"
},
{
"category": "external",
"summary": "RHBZ#530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3880",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3880"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK UI logging information leakage(6664512)"
},
{
"cve": "CVE-2009-3881",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530173"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an \"information leak vulnerability,\" aka Bug Id 6636650.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK resurrected classloaders can still have children (6636650)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3881"
},
{
"category": "external",
"summary": "RHBZ#530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3881",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK resurrected classloaders can still have children (6636650)"
},
{
"cve": "CVE-2009-3882",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657026.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3882"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3882",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3882"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3883",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL\u0026F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657138.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3883"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3883",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3884",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530300"
}
],
"notes": [
{
"category": "description",
"text": "The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK zoneinfo file existence information leak (6824265)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3884"
},
{
"category": "external",
"summary": "RHBZ#530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3884",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK zoneinfo file existence information leak (6824265)"
},
{
"cve": "CVE-2009-3886",
"discovery_date": "2009-11-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "532914"
}
],
"notes": [
{
"category": "description",
"text": "The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1) application or (2) applet, which has unspecified impact and attack vectors, related to a \"regression,\" aka Bug Id 6870531.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "REGRESSION: have problem to run JNLP app and applets with signed Jar files (6870531)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3886"
},
{
"category": "external",
"summary": "RHBZ#532914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3886",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3886"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3886",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3886"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "REGRESSION: have problem to run JNLP app and applets with signed Jar files (6870531)"
}
]
}
RHSA-2010:0166
Vulnerability from csaf_redhat - Published: 2010-03-25 10:19 - Updated: 2025-11-21 17:35Summary
Red Hat Security Advisory: gnutls security update
Notes
Topic
Updated gnutls packages that fix two security issues are now available for
Red Hat Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
The GnuTLS library provides support for cryptographic algorithms and for
protocols such as Transport Layer Security (TLS).
A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure
Sockets Layer) protocols handled session renegotiation. A man-in-the-middle
attacker could use this flaw to prefix arbitrary plain text to a client's
session (for example, an HTTPS connection to a website). This could force
the server to process an attacker's request as if authenticated using the
victim's credentials. This update addresses this flaw by implementing the
TLS Renegotiation Indication Extension, as defined in RFC 5746.
(CVE-2009-3555)
Refer to the following Knowledgebase article for additional details about
the CVE-2009-3555 flaw: http://kbase.redhat.com/faq/docs/DOC-20491
Dan Kaminsky found that browsers could accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. GnuTLS
now disables the use of the MD2 algorithm inside signatures by default.
(CVE-2009-2409)
Users of GnuTLS are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. For the update to take
effect, all applications linked to the GnuTLS library must be restarted, or
the system rebooted.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated gnutls packages that fix two security issues are now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The GnuTLS library provides support for cryptographic algorithms and for\nprotocols such as Transport Layer Security (TLS).\n\nA flaw was found in the way the TLS/SSL (Transport Layer Security/Secure\nSockets Layer) protocols handled session renegotiation. A man-in-the-middle\nattacker could use this flaw to prefix arbitrary plain text to a client\u0027s\nsession (for example, an HTTPS connection to a website). This could force\nthe server to process an attacker\u0027s request as if authenticated using the\nvictim\u0027s credentials. This update addresses this flaw by implementing the\nTLS Renegotiation Indication Extension, as defined in RFC 5746.\n(CVE-2009-3555)\n\nRefer to the following Knowledgebase article for additional details about\nthe CVE-2009-3555 flaw: http://kbase.redhat.com/faq/docs/DOC-20491\n\nDan Kaminsky found that browsers could accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. GnuTLS\nnow disables the use of the MD2 algorithm inside signatures by default.\n(CVE-2009-2409)\n\nUsers of GnuTLS are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. For the update to take\neffect, all applications linked to the GnuTLS library must be restarted, or\nthe system rebooted.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2010:0166",
"url": "https://access.redhat.com/errata/RHSA-2010:0166"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "http://kbase.redhat.com/faq/docs/DOC-20491",
"url": "http://kbase.redhat.com/faq/docs/DOC-20491"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "533125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0166.json"
}
],
"title": "Red Hat Security Advisory: gnutls security update",
"tracking": {
"current_release_date": "2025-11-21T17:35:57+00:00",
"generator": {
"date": "2025-11-21T17:35:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2010:0166",
"initial_release_date": "2010-03-25T10:19:00+00:00",
"revision_history": [
{
"date": "2010-03-25T10:19:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2010-03-25T06:19:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:35:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"product": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"product_id": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@1.4.1-3.el5_4.8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.i386",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.i386",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"product": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"product_id": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@1.4.1-3.el5_4.8?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.src",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.src",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"product": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"product_id": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@1.4.1-3.el5_4.8?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"product": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"product_id": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@1.4.1-3.el5_4.8?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"product": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"product_id": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@1.4.1-3.el5_4.8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.s390",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.src"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.src"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-03-25T10:19:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-3555",
"cwe": {
"id": "CWE-300",
"name": "Channel Accessible by Non-Endpoint"
},
"discovery_date": "2009-10-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533125"
}
],
"notes": [
{
"category": "description",
"text": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "TLS: MITM attacks via session renegotiation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article:\nhttps://access.redhat.com/articles/20490",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3555"
},
{
"category": "external",
"summary": "RHBZ#533125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3555",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3555"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555"
}
],
"release_date": "2009-11-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-03-25T10:19:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "TLS: MITM attacks via session renegotiation"
}
]
}
RHSA-2009_1662
Vulnerability from csaf_redhat - Published: 2009-12-11 13:42 - Updated: 2024-11-14 10:47Summary
Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update
Notes
Topic
Updated java-1.5.0-sun packages that correct several security issues are
now available for Red Hat Network Satellite Server 5.1.
This update has been rated as having low security impact by the Red Hat
Security Response Team.
Details
This update corrects several security vulnerabilities in the Sun Java
Runtime Environment shipped as part of Red Hat Network Satellite Server
5.1. In a typical operating environment, these are of low security risk as
the runtime is not used on untrusted applets.
Several flaws were fixed in the Sun Java 5 Runtime Environment.
(CVE-2006-2426, CVE-2008-2086, CVE-2009-1093, CVE-2009-1094, CVE-2009-1095,
CVE-2009-1096, CVE-2009-1098, CVE-2009-1099, CVE-2009-1100, CVE-2009-1103,
CVE-2009-1104, CVE-2009-1107, CVE-2009-2409, CVE-2009-2475, CVE-2009-2625,
CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2675,
CVE-2009-2676, CVE-2009-2689, CVE-2009-3728, CVE-2009-3873, CVE-2009-3876,
CVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,
CVE-2009-3883, CVE-2009-3884)
Note: This is the final update for the java-1.5.0-sun packages, as the Sun
Java SE Release family 5.0 has now reached End of Service Life. An
alternative to Sun Java SE 5.0 is the Java 2 Technology Edition of the
IBM Developer Kit for Linux, which is available from the Satellite 5.1
channels on the Red Hat Network.
For a long term solution, Red Hat advises users to switch from Sun Java SE
5.0 to the Java 2 Technology Edition of the IBM Developer Kit for Linux.
Refer to the Solution section for instructions.
Users of Red Hat Network Satellite Server 5.1 are advised to upgrade to
these updated java-1.5.0-sun packages, which resolve these issues. All
running instances of Sun Java must be restarted for the update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated java-1.5.0-sun packages that correct several security issues are\nnow available for Red Hat Network Satellite Server 5.1.\n\nThis update has been rated as having low security impact by the Red Hat\nSecurity Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "This update corrects several security vulnerabilities in the Sun Java\nRuntime Environment shipped as part of Red Hat Network Satellite Server\n5.1. In a typical operating environment, these are of low security risk as\nthe runtime is not used on untrusted applets.\n\nSeveral flaws were fixed in the Sun Java 5 Runtime Environment.\n(CVE-2006-2426, CVE-2008-2086, CVE-2009-1093, CVE-2009-1094, CVE-2009-1095,\nCVE-2009-1096, CVE-2009-1098, CVE-2009-1099, CVE-2009-1100, CVE-2009-1103,\nCVE-2009-1104, CVE-2009-1107, CVE-2009-2409, CVE-2009-2475, CVE-2009-2625,\nCVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2675,\nCVE-2009-2676, CVE-2009-2689, CVE-2009-3728, CVE-2009-3873, CVE-2009-3876,\nCVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,\nCVE-2009-3883, CVE-2009-3884)\n\nNote: This is the final update for the java-1.5.0-sun packages, as the Sun\nJava SE Release family 5.0 has now reached End of Service Life. An\nalternative to Sun Java SE 5.0 is the Java 2 Technology Edition of the\nIBM Developer Kit for Linux, which is available from the Satellite 5.1\nchannels on the Red Hat Network.\n\nFor a long term solution, Red Hat advises users to switch from Sun Java SE\n5.0 to the Java 2 Technology Edition of the IBM Developer Kit for Linux.\nRefer to the Solution section for instructions.\n\nUsers of Red Hat Network Satellite Server 5.1 are advised to upgrade to\nthese updated java-1.5.0-sun packages, which resolve these issues. All\nrunning instances of Sun Java must be restarted for the update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1662",
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "395481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=395481"
},
{
"category": "external",
"summary": "474556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=474556"
},
{
"category": "external",
"summary": "490167",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490167"
},
{
"category": "external",
"summary": "490168",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490168"
},
{
"category": "external",
"summary": "490169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490169"
},
{
"category": "external",
"summary": "490178",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490178"
},
{
"category": "external",
"summary": "492302",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492302"
},
{
"category": "external",
"summary": "492305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492305"
},
{
"category": "external",
"summary": "492306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492306"
},
{
"category": "external",
"summary": "492308",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492308"
},
{
"category": "external",
"summary": "492312",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492312"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "512896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512896"
},
{
"category": "external",
"summary": "512907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907"
},
{
"category": "external",
"summary": "512914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512914"
},
{
"category": "external",
"summary": "512920",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512920"
},
{
"category": "external",
"summary": "512921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512921"
},
{
"category": "external",
"summary": "513215",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=513215"
},
{
"category": "external",
"summary": "513222",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=513222"
},
{
"category": "external",
"summary": "515890",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=515890"
},
{
"category": "external",
"summary": "530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "533185",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533185"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1662.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update",
"tracking": {
"current_release_date": "2024-11-14T10:47:45+00:00",
"generator": {
"date": "2024-11-14T10:47:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2009:1662",
"initial_release_date": "2009-12-11T13:42:00+00:00",
"revision_history": [
{
"date": "2009-12-11T13:42:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-12-11T08:42:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T10:47:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product": {
"name": "Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT5.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.1::el4"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
}
],
"category": "architecture",
"name": "i586"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-RHNSAT5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-RHNSAT5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-RHNSAT5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-RHNSAT5.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-2426",
"discovery_date": "2007-11-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "395481"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Untrusted applet causes DoS by filling up disk space",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-2426"
},
{
"category": "external",
"summary": "RHBZ#395481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=395481"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-2426",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-2426"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2426",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2426"
}
],
"release_date": "2006-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Untrusted applet causes DoS by filling up disk space"
},
{
"cve": "CVE-2008-2086",
"discovery_date": "2008-12-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "474556"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka \"Java Web Start File Inclusion\" and CR 6694892.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Java Web Start File Inclusion via System Properties Override",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2086"
},
{
"category": "external",
"summary": "RHBZ#474556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=474556"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2086",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2086"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2086",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2086"
}
],
"release_date": "2008-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Java Web Start File Inclusion via System Properties Override"
},
{
"cve": "CVE-2009-1093",
"discovery_date": "2009-03-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "490167"
}
],
"notes": [
{
"category": "description",
"text": "LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK remote LDAP Denial-Of-Service (6717680)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1093"
},
{
"category": "external",
"summary": "RHBZ#490167",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490167"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1093",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1093"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1093",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1093"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK remote LDAP Denial-Of-Service (6717680)"
},
{
"cve": "CVE-2009-1094",
"discovery_date": "2009-03-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "490168"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK LDAP client remote code execution (6737315)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1094"
},
{
"category": "external",
"summary": "RHBZ#490168",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490168"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1094",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1094"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1094",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1094"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK LDAP client remote code execution (6737315)"
},
{
"cve": "CVE-2009-1095",
"discovery_date": "2009-03-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "490169"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK Pack200 Buffer overflow vulnerability (6792554)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1095"
},
{
"category": "external",
"summary": "RHBZ#490169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1095",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1095"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1095",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1095"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK Pack200 Buffer overflow vulnerability (6792554)"
},
{
"cve": "CVE-2009-1096",
"discovery_date": "2009-03-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "490169"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK Pack200 Buffer overflow vulnerability (6792554)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1096"
},
{
"category": "external",
"summary": "RHBZ#490169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1096",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1096"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK Pack200 Buffer overflow vulnerability (6792554)"
},
{
"cve": "CVE-2009-1098",
"discovery_date": "2009-03-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "490178"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK GIF processing buffer overflow vulnerability (6804998)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1098"
},
{
"category": "external",
"summary": "RHBZ#490178",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=490178"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1098",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1098"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1098",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1098"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK GIF processing buffer overflow vulnerability (6804998)"
},
{
"cve": "CVE-2009-1099",
"discovery_date": "2009-03-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492302"
}
],
"notes": [
{
"category": "description",
"text": "Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Type1 font processing buffer overflow vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1099"
},
{
"category": "external",
"summary": "RHBZ#492302",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492302"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1099",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1099"
}
],
"release_date": "2009-03-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK: Type1 font processing buffer overflow vulnerability"
},
{
"cve": "CVE-2009-1100",
"discovery_date": "2009-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492305"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) \"limits on Font creation,\" aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: DoS (disk consumption) via handling of temporary font files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1100"
},
{
"category": "external",
"summary": "RHBZ#492305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492305"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1100",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1100"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1100",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1100"
}
],
"release_date": "2009-03-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: DoS (disk consumption) via handling of temporary font files"
},
{
"cve": "CVE-2009-1103",
"discovery_date": "2009-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492306"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to \"deserializing applets,\" aka CR 6646860.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Files disclosure, arbitrary code execution via \"deserializing applets\" (6646860)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1103"
},
{
"category": "external",
"summary": "RHBZ#492306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1103",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1103"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1103",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1103"
}
],
"release_date": "2009-03-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK: Files disclosure, arbitrary code execution via \"deserializing applets\" (6646860)"
},
{
"cve": "CVE-2009-1104",
"discovery_date": "2009-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492308"
}
],
"notes": [
{
"category": "description",
"text": "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Intended access restrictions bypass via LiveConnect (6724331)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1104"
},
{
"category": "external",
"summary": "RHBZ#492308",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492308"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1104",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1104"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1104",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1104"
}
],
"release_date": "2009-03-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Intended access restrictions bypass via LiveConnect (6724331)"
},
{
"cve": "CVE-2009-1107",
"discovery_date": "2009-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492312"
}
],
"notes": [
{
"category": "description",
"text": "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a \"Swing JLabel HTML parsing vulnerability,\" aka CR 6782871.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Signed applet remote misuse possibility (6782871)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1107"
},
{
"category": "external",
"summary": "RHBZ#492312",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492312"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1107",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1107"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1107"
}
],
"release_date": "2009-03-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Signed applet remote misuse possibility (6782871)"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-2475",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "513215"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2475"
},
{
"category": "external",
"summary": "RHBZ#513215",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=513215"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2475",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2475"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2475",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2475"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)"
},
{
"cve": "CVE-2009-2625",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512921"
}
],
"notes": [
{
"category": "description",
"text": "XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: XML parsing Denial-Of-Service (6845701)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2625"
},
{
"category": "external",
"summary": "RHBZ#512921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512921"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2625",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2625"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: XML parsing Denial-Of-Service (6845701)"
},
{
"cve": "CVE-2009-2670",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512896"
}
],
"notes": [
{
"category": "description",
"text": "The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK Untrusted applet System properties access (6738524)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2670"
},
{
"category": "external",
"summary": "RHBZ#512896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512896"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2670",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2670"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2670",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2670"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK Untrusted applet System properties access (6738524)"
},
{
"cve": "CVE-2009-2671",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512907"
}
],
"notes": [
{
"category": "description",
"text": "The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK Proxy mechanism information leaks (6801071)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2671"
},
{
"category": "external",
"summary": "RHBZ#512907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2671",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2671"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2671",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2671"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK Proxy mechanism information leaks (6801071)"
},
{
"cve": "CVE-2009-2672",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512907"
}
],
"notes": [
{
"category": "description",
"text": "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK Proxy mechanism information leaks (6801071)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2672"
},
{
"category": "external",
"summary": "RHBZ#512907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512907"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2672",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2672"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2672",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2672"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK Proxy mechanism information leaks (6801071)"
},
{
"cve": "CVE-2009-2673",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512914"
}
],
"notes": [
{
"category": "description",
"text": "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK proxy mechanism allows non-authorized socket connections (6801497)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2673"
},
{
"category": "external",
"summary": "RHBZ#512914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2673",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2673"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2673",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2673"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK proxy mechanism allows non-authorized socket connections (6801497)"
},
{
"cve": "CVE-2009-2675",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512920"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Java Web Start Buffer unpack200 processing integer overflow (6830335)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2675"
},
{
"category": "external",
"summary": "RHBZ#512920",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512920"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2675",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2675"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2675",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2675"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Java Web Start Buffer unpack200 processing integer overflow (6830335)"
},
{
"cve": "CVE-2009-2676",
"discovery_date": "2009-08-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "515890"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JRE applet launcher vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2676"
},
{
"category": "external",
"summary": "RHBZ#515890",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=515890"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2676",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2676"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.8,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JRE applet launcher vulnerability"
},
{
"cve": "CVE-2009-2689",
"discovery_date": "2009-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "513222"
}
],
"notes": [
{
"category": "description",
"text": "JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JDK13Services grants unnecessary privileges (6777448)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2689"
},
{
"category": "external",
"summary": "RHBZ#513222",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=513222"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2689",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2689"
}
],
"release_date": "2009-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK JDK13Services grants unnecessary privileges (6777448)"
},
{
"cve": "CVE-2009-3728",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530098"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ICC_Profile file existence detection information leak (6631533)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3728"
},
{
"category": "external",
"summary": "RHBZ#530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3728",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK ICC_Profile file existence detection information leak (6631533)"
},
{
"cve": "CVE-2009-3873",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530053"
}
],
"notes": [
{
"category": "description",
"text": "The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JPEG Image Writer quantization problem (6862968)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3873"
},
{
"category": "external",
"summary": "RHBZ#530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3873",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JPEG Image Writer quantization problem (6862968)"
},
{
"cve": "CVE-2009-3876",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3876"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3876",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3877",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3877"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3877",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3879",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530297"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK GraphicsConfiguration information leak(6822057)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3879"
},
{
"category": "external",
"summary": "RHBZ#530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3879",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK GraphicsConfiguration information leak(6822057)"
},
{
"cve": "CVE-2009-3880",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530296"
}
],
"notes": [
{
"category": "description",
"text": "The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK UI logging information leakage(6664512)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3880"
},
{
"category": "external",
"summary": "RHBZ#530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3880",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3880"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK UI logging information leakage(6664512)"
},
{
"cve": "CVE-2009-3881",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530173"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an \"information leak vulnerability,\" aka Bug Id 6636650.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK resurrected classloaders can still have children (6636650)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3881"
},
{
"category": "external",
"summary": "RHBZ#530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3881",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK resurrected classloaders can still have children (6636650)"
},
{
"cve": "CVE-2009-3882",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657026.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3882"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3882",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3882"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3883",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL\u0026F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657138.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3883"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3883",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3884",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530300"
}
],
"notes": [
{
"category": "description",
"text": "The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK zoneinfo file existence information leak (6824265)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3884"
},
{
"category": "external",
"summary": "RHBZ#530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3884",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-12-11T13:42:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nRun the following commands to switch from Sun Java SE 5.0 to the Java 2\nTechnology Edition of the IBM Developer Kit for Linux:\n\n1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr\n\n2) service rhn-satellite stop\n\n3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java\n\n4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac\n\n5) service rhn-satellite start",
"product_ids": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1662"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-RHNSAT5.1:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK zoneinfo file existence information leak (6824265)"
}
]
}
RHSA-2010_0163
Vulnerability from csaf_redhat - Published: 2010-03-25 09:11 - Updated: 2024-11-22 02:44Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
Updated openssl packages that fix several security issues are now available
for Red Hat Enterprise Linux 3 and 4.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols, as well as a
full-strength, general purpose cryptography library.
A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure
Sockets Layer) protocols handled session renegotiation. A man-in-the-middle
attacker could use this flaw to prefix arbitrary plain text to a client's
session (for example, an HTTPS connection to a website). This could force
the server to process an attacker's request as if authenticated using the
victim's credentials. This update addresses this flaw by implementing the
TLS Renegotiation Indication Extension, as defined in RFC 5746.
(CVE-2009-3555)
Refer to the following Knowledgebase article for additional details about
the CVE-2009-3555 flaw: http://kbase.redhat.com/faq/docs/DOC-20491
Dan Kaminsky found that browsers could accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser.
OpenSSL now disables the use of the MD2 algorithm inside signatures by
default. (CVE-2009-2409)
An input validation flaw was found in the handling of the BMPString and
UniversalString ASN1 string types in OpenSSL's ASN1_STRING_print_ex()
function. An attacker could use this flaw to create a specially-crafted
X.509 certificate that could cause applications using the affected function
to crash when printing certificate contents. (CVE-2009-0590)
Note: The affected function is rarely used. No application shipped with Red
Hat Enterprise Linux calls this function, for example.
All OpenSSL users should upgrade to these updated packages, which contain
backported patches to resolve these issues. For the update to take effect,
all services linked to the OpenSSL library must be restarted, or the system
rebooted.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openssl packages that fix several security issues are now available\nfor Red Hat Enterprise Linux 3 and 4.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)\nand Transport Layer Security (TLS v1) protocols, as well as a\nfull-strength, general purpose cryptography library.\n\nA flaw was found in the way the TLS/SSL (Transport Layer Security/Secure\nSockets Layer) protocols handled session renegotiation. A man-in-the-middle\nattacker could use this flaw to prefix arbitrary plain text to a client\u0027s\nsession (for example, an HTTPS connection to a website). This could force\nthe server to process an attacker\u0027s request as if authenticated using the\nvictim\u0027s credentials. This update addresses this flaw by implementing the\nTLS Renegotiation Indication Extension, as defined in RFC 5746.\n(CVE-2009-3555)\n\nRefer to the following Knowledgebase article for additional details about\nthe CVE-2009-3555 flaw: http://kbase.redhat.com/faq/docs/DOC-20491\n\nDan Kaminsky found that browsers could accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser.\nOpenSSL now disables the use of the MD2 algorithm inside signatures by\ndefault. (CVE-2009-2409)\n\nAn input validation flaw was found in the handling of the BMPString and\nUniversalString ASN1 string types in OpenSSL\u0027s ASN1_STRING_print_ex()\nfunction. An attacker could use this flaw to create a specially-crafted\nX.509 certificate that could cause applications using the affected function\nto crash when printing certificate contents. (CVE-2009-0590)\n\nNote: The affected function is rarely used. No application shipped with Red\nHat Enterprise Linux calls this function, for example.\n\nAll OpenSSL users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. For the update to take effect,\nall services linked to the OpenSSL library must be restarted, or the system\nrebooted.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2010:0163",
"url": "https://access.redhat.com/errata/RHSA-2010:0163"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "http://kbase.redhat.com/faq/docs/DOC-20491",
"url": "http://kbase.redhat.com/faq/docs/DOC-20491"
},
{
"category": "external",
"summary": "492304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492304"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "533125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0163.json"
}
],
"title": "Red Hat Security Advisory: openssl security update",
"tracking": {
"current_release_date": "2024-11-22T02:44:43+00:00",
"generator": {
"date": "2024-11-22T02:44:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2010:0163",
"initial_release_date": "2010-03-25T09:11:00+00:00",
"revision_history": [
{
"date": "2010-03-25T09:11:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2010-03-25T05:15:38+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T02:44:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.ia64",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.ia64",
"product_id": "openssl-devel-0:0.9.7a-33.26.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.ia64",
"product": {
"name": "openssl-0:0.9.7a-33.26.ia64",
"product_id": "openssl-0:0.9.7a-33.26.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.ia64",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.ia64",
"product_id": "openssl-perl-0:0.9.7a-33.26.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.i686",
"product": {
"name": "openssl-0:0.9.7a-33.26.i686",
"product_id": "openssl-0:0.9.7a-33.26.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.x86_64",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.x86_64",
"product_id": "openssl-devel-0:0.9.7a-33.26.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.x86_64",
"product": {
"name": "openssl-0:0.9.7a-33.26.x86_64",
"product_id": "openssl-0:0.9.7a-33.26.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.x86_64",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.x86_64",
"product_id": "openssl-perl-0:0.9.7a-33.26.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.i386",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.i386",
"product_id": "openssl-devel-0:0.9.7a-33.26.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.i386",
"product": {
"name": "openssl-0:0.9.7a-33.26.i386",
"product_id": "openssl-0:0.9.7a-33.26.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.i386",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.i386",
"product_id": "openssl-perl-0:0.9.7a-33.26.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.src",
"product": {
"name": "openssl-0:0.9.7a-33.26.src",
"product_id": "openssl-0:0.9.7a-33.26.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=src"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.ppc",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.ppc",
"product_id": "openssl-devel-0:0.9.7a-33.26.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.ppc",
"product": {
"name": "openssl-0:0.9.7a-33.26.ppc",
"product_id": "openssl-0:0.9.7a-33.26.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.ppc",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.ppc",
"product_id": "openssl-perl-0:0.9.7a-33.26.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.ppc64",
"product": {
"name": "openssl-0:0.9.7a-33.26.ppc64",
"product_id": "openssl-0:0.9.7a-33.26.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.s390x",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.s390x",
"product_id": "openssl-devel-0:0.9.7a-33.26.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.s390x",
"product": {
"name": "openssl-0:0.9.7a-33.26.s390x",
"product_id": "openssl-0:0.9.7a-33.26.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.s390x",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.s390x",
"product_id": "openssl-perl-0:0.9.7a-33.26.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.s390",
"product": {
"name": "openssl-0:0.9.7a-33.26.s390",
"product_id": "openssl-0:0.9.7a-33.26.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.s390",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.s390",
"product_id": "openssl-devel-0:0.9.7a-33.26.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.s390",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.s390",
"product_id": "openssl-perl-0:0.9.7a-33.26.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.src"
},
"product_reference": "openssl-0:0.9.7a-33.26.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i686 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.src"
},
"product_reference": "openssl-0:0.9.7a-33.26.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.src"
},
"product_reference": "openssl-0:0.9.7a-33.26.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.src"
},
"product_reference": "openssl-0:0.9.7a-33.26.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.src"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.src"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.src"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-0590",
"discovery_date": "2009-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492304"
}
],
"notes": [
{
"category": "description",
"text": "The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: ASN1 printing crash",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0590"
},
{
"category": "external",
"summary": "RHBZ#492304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492304"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0590",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0590"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0590",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0590"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-03-25T09:11:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0163"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: ASN1 printing crash"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-03-25T09:11:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0163"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-3555",
"cwe": {
"id": "CWE-300",
"name": "Channel Accessible by Non-Endpoint"
},
"discovery_date": "2009-10-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533125"
}
],
"notes": [
{
"category": "description",
"text": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "TLS: MITM attacks via session renegotiation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article:\nhttps://access.redhat.com/articles/20490",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3555"
},
{
"category": "external",
"summary": "RHBZ#533125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3555",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3555"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555"
}
],
"release_date": "2009-11-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-03-25T09:11:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0163"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "TLS: MITM attacks via session renegotiation"
}
]
}
RHSA-2009_1432
Vulnerability from csaf_redhat - Published: 2009-09-09 23:48 - Updated: 2024-11-22 03:19Summary
Red Hat Security Advisory: seamonkey security update
Notes
Topic
Updated seamonkey packages that fix several security issues are now
available for Red Hat Enterprise Linux 3.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.
Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2009-3072, CVE-2009-3075)
A use-after-free flaw was found in SeaMonkey. An attacker could use this
flaw to crash SeaMonkey or, potentially, execute arbitrary code with the
privileges of the user running SeaMonkey. (CVE-2009-3077)
Dan Kaminsky discovered flaws in the way browsers such as SeaMonkey handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
SeaMonkey, the attacker could use the certificate during a
man-in-the-middle attack and potentially confuse SeaMonkey into accepting
it by mistake. (CVE-2009-2408)
Descriptions in the dialogs when adding and removing PKCS #11 modules were
not informative. An attacker able to trick a user into installing a
malicious PKCS #11 module could use this flaw to install their own
Certificate Authority certificates on a user's machine, making it possible
to trick the user into believing they are viewing a trusted site or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2009-3076)
A flaw was found in the way SeaMonkey displays the address bar when
window.open() is called in a certain way. An attacker could use this flaw
to conceal a malicious URL, possibly tricking a user into believing they
are viewing a trusted site. (CVE-2009-2654)
Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
(provided by SeaMonkey) now disables the use of MD2 and MD4 algorithms
inside signatures by default. (CVE-2009-2409)
All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated seamonkey packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 3.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "SeaMonkey is an open source Web browser, email and newsgroup client, IRC\nchat client, and HTML editor.\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause SeaMonkey to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2009-3072, CVE-2009-3075)\n\nA use-after-free flaw was found in SeaMonkey. An attacker could use this\nflaw to crash SeaMonkey or, potentially, execute arbitrary code with the\nprivileges of the user running SeaMonkey. (CVE-2009-3077)\n\nDan Kaminsky discovered flaws in the way browsers such as SeaMonkey handle\nNULL characters in a certificate. If an attacker is able to get a\ncarefully-crafted certificate signed by a Certificate Authority trusted by\nSeaMonkey, the attacker could use the certificate during a\nman-in-the-middle attack and potentially confuse SeaMonkey into accepting\nit by mistake. (CVE-2009-2408)\n\nDescriptions in the dialogs when adding and removing PKCS #11 modules were\nnot informative. An attacker able to trick a user into installing a\nmalicious PKCS #11 module could use this flaw to install their own\nCertificate Authority certificates on a user\u0027s machine, making it possible\nto trick the user into believing they are viewing a trusted site or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2009-3076)\n\nA flaw was found in the way SeaMonkey displays the address bar when\nwindow.open() is called in a certain way. An attacker could use this flaw\nto conceal a malicious URL, possibly tricking a user into believing they\nare viewing a trusted site. (CVE-2009-2654)\n\nDan Kaminsky found that browsers still accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. NSS\n(provided by SeaMonkey) now disables the use of MD2 and MD4 algorithms\ninside signatures by default. (CVE-2009-2409)\n\nAll SeaMonkey users should upgrade to these updated packages, which correct\nthese issues. After installing the update, SeaMonkey must be restarted for\nthe changes to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1432",
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "521311",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521311"
},
{
"category": "external",
"summary": "521688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521688"
},
{
"category": "external",
"summary": "521691",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521691"
},
{
"category": "external",
"summary": "521692",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521692"
},
{
"category": "external",
"summary": "521693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521693"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1432.json"
}
],
"title": "Red Hat Security Advisory: seamonkey security update",
"tracking": {
"current_release_date": "2024-11-22T03:19:13+00:00",
"generator": {
"date": "2024-11-22T03:19:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2009:1432",
"initial_release_date": "2009-09-09T23:48:00+00:00",
"revision_history": [
{
"date": "2009-09-09T23:48:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-09-09T19:50:33+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T03:19:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.src",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.src",
"product_id": "seamonkey-0:1.0.9-0.45.el3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.src"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.src"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.src"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.src"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2408",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510251"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a \u0027\\0\u0027 character in a domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox/nss: doesn\u0027t handle NULL in Common Name properly",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2408"
},
{
"category": "external",
"summary": "RHBZ#510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox/nss: doesn\u0027t handle NULL in Common Name properly"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-2654",
"discovery_date": "2009-08-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "521311"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: URL bar spoofing vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2654"
},
{
"category": "external",
"summary": "RHBZ#521311",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521311"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2654",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2654"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2654",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2654"
}
],
"release_date": "2009-07-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: URL bar spoofing vulnerability"
},
{
"cve": "CVE-2009-3072",
"discovery_date": "2009-09-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "521688"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Firefox 3.5.3 3.0.14 browser engine crashes",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3072"
},
{
"category": "external",
"summary": "RHBZ#521688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3072",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3072"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3072",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3072"
}
],
"release_date": "2009-09-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Firefox 3.5.3 3.0.14 browser engine crashes"
},
{
"cve": "CVE-2009-3075",
"discovery_date": "2009-09-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "521691"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Firefox 3.5.2 3.0.14 JavaScript engine crashes",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3075"
},
{
"category": "external",
"summary": "RHBZ#521691",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521691"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3075",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3075"
}
],
"release_date": "2009-09-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Firefox 3.5.2 3.0.14 JavaScript engine crashes"
},
{
"cve": "CVE-2009-3076",
"discovery_date": "2009-09-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "521692"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3076"
},
{
"category": "external",
"summary": "RHBZ#521692",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521692"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3076",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3076"
}
],
"release_date": "2009-09-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal"
},
{
"cve": "CVE-2009-3077",
"discovery_date": "2009-09-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "521693"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a \"dangling pointer vulnerability.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3077"
},
{
"category": "external",
"summary": "RHBZ#521693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521693"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3077",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3077"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3077",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3077"
}
],
"release_date": "2009-09-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability"
}
]
}
RHSA-2009_1184
Vulnerability from csaf_redhat - Published: 2009-07-30 22:09 - Updated: 2024-11-22 03:00Summary
Red Hat Security Advisory: nspr and nss security and bug fix update
Notes
Topic
Updated nspr and nss packages that fix security issues and a bug are now
available for Red Hat Enterprise Linux 4.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities. These facilities include threads, thread
synchronization, normal file and network I/O, interval timing, calendar
time, basic memory management (malloc and free), and shared library linking.
Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications. Applications built with NSS can support SSLv2, SSLv3, TLS,
and other security standards.
These updated packages upgrade NSS from the previous version, 3.12.2, to a
prerelease of version 3.12.4. The version of NSPR has also been upgraded
from 4.7.3 to 4.7.4.
Moxie Marlinspike reported a heap overflow flaw in a regular expression
parser in the NSS library used by browsers such as Mozilla Firefox to match
common names in certificates. A malicious website could present a
carefully-crafted certificate in such a way as to trigger the heap
overflow, leading to a crash or, possibly, arbitrary code execution with
the permissions of the user running the browser. (CVE-2009-2404)
Note: in order to exploit this issue without further user interaction in
Firefox, the carefully-crafted certificate would need to be signed by a
Certificate Authority trusted by Firefox, otherwise Firefox presents the
victim with a warning that the certificate is untrusted. Only if the user
then accepts the certificate will the overflow take place.
Dan Kaminsky discovered flaws in the way browsers such as Firefox handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
Firefox, the attacker could use the certificate during a man-in-the-middle
attack and potentially confuse Firefox into accepting it by mistake.
(CVE-2009-2408)
Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
now disables the use of MD2 and MD4 algorithms inside signatures by
default. (CVE-2009-2409)
These version upgrades also provide a fix for the following bug:
* SSL client authentication failed against an Apache server when it was
using the mod_nss module and configured for NSSOCSP. On the client side,
the user agent received an error message that referenced "Error Code:
-12271" and stated that establishing an encrypted connection had failed
because the certificate had been rejected by the host.
On the server side, the nss_error_log under /var/log/httpd/ contained the
following message:
[error] Re-negotiation handshake failed: Not accepted by client!?
Also, /var/log/httpd/error_log contained this error:
SSL Library Error: -8071 The OCSP server experienced an internal error
With these updated packages, the dependency problem which caused this
failure has been resolved so that SSL client authentication with an
Apache web server using mod_nss which is configured for NSSOCSP succeeds
as expected. Note that if the presented client certificate is expired,
then access is denied, the user agent is presented with an error message
about the invalid certificate, and the OCSP queries are seen in the OCSP
responder. Also, similar OCSP status verification happens for SSL server
certificates used in Apache upon instance start or restart. (BZ#508027)
All users of nspr and nss are advised to upgrade to these updated packages,
which resolve these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated nspr and nss packages that fix security issues and a bug are now\navailable for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Netscape Portable Runtime (NSPR) provides platform independence for non-GUI\noperating system facilities. These facilities include threads, thread\nsynchronization, normal file and network I/O, interval timing, calendar\ntime, basic memory management (malloc and free), and shared library linking.\n\nNetwork Security Services (NSS) is a set of libraries designed to support\nthe cross-platform development of security-enabled client and server\napplications. Applications built with NSS can support SSLv2, SSLv3, TLS,\nand other security standards.\n\nThese updated packages upgrade NSS from the previous version, 3.12.2, to a\nprerelease of version 3.12.4. The version of NSPR has also been upgraded\nfrom 4.7.3 to 4.7.4. \n\nMoxie Marlinspike reported a heap overflow flaw in a regular expression\nparser in the NSS library used by browsers such as Mozilla Firefox to match\ncommon names in certificates. A malicious website could present a\ncarefully-crafted certificate in such a way as to trigger the heap\noverflow, leading to a crash or, possibly, arbitrary code execution with\nthe permissions of the user running the browser. (CVE-2009-2404)\n\nNote: in order to exploit this issue without further user interaction in\nFirefox, the carefully-crafted certificate would need to be signed by a\nCertificate Authority trusted by Firefox, otherwise Firefox presents the\nvictim with a warning that the certificate is untrusted. Only if the user\nthen accepts the certificate will the overflow take place.\n\nDan Kaminsky discovered flaws in the way browsers such as Firefox handle\nNULL characters in a certificate. If an attacker is able to get a\ncarefully-crafted certificate signed by a Certificate Authority trusted by\nFirefox, the attacker could use the certificate during a man-in-the-middle\nattack and potentially confuse Firefox into accepting it by mistake.\n(CVE-2009-2408)\n\nDan Kaminsky found that browsers still accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. NSS\nnow disables the use of MD2 and MD4 algorithms inside signatures by\ndefault. (CVE-2009-2409)\n\nThese version upgrades also provide a fix for the following bug:\n\n* SSL client authentication failed against an Apache server when it was \nusing the mod_nss module and configured for NSSOCSP. On the client side,\nthe user agent received an error message that referenced \"Error Code:\n-12271\" and stated that establishing an encrypted connection had failed\nbecause the certificate had been rejected by the host.\n\nOn the server side, the nss_error_log under /var/log/httpd/ contained the\nfollowing message:\n\n[error] Re-negotiation handshake failed: Not accepted by client!?\n\nAlso, /var/log/httpd/error_log contained this error:\n\nSSL Library Error: -8071 The OCSP server experienced an internal error\n\nWith these updated packages, the dependency problem which caused this\nfailure has been resolved so that SSL client authentication with an\nApache web server using mod_nss which is configured for NSSOCSP succeeds\nas expected. Note that if the presented client certificate is expired,\nthen access is denied, the user agent is presented with an error message\nabout the invalid certificate, and the OCSP queries are seen in the OCSP\nresponder. Also, similar OCSP status verification happens for SSL server\ncertificates used in Apache upon instance start or restart. (BZ#508027)\n\nAll users of nspr and nss are advised to upgrade to these updated packages,\nwhich resolve these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1184",
"url": "https://access.redhat.com/errata/RHSA-2009:1184"
},
{
"category": "external",
"summary": "http://www.redhat.com/security/updates/classification/#critical",
"url": "http://www.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "508027",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=508027"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1184.json"
}
],
"title": "Red Hat Security Advisory: nspr and nss security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T03:00:30+00:00",
"generator": {
"date": "2024-11-22T03:00:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2009:1184",
"initial_release_date": "2009-07-30T22:09:00+00:00",
"revision_history": [
{
"date": "2009-07-30T22:09:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-30T18:09:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T03:00:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.ia64",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.ia64",
"product_id": "nspr-0:4.7.4-1.el4_8.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.i386",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.i386",
"product_id": "nspr-0:4.7.4-1.el4_8.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"product_id": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.src",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.src",
"product_id": "nspr-0:4.7.4-1.el4_8.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.ppc",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc",
"product_id": "nspr-0:4.7.4-1.el4_8.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"product_id": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.s390x",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390x",
"product_id": "nspr-0:4.7.4-1.el4_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.s390",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390",
"product_id": "nspr-0:4.7.4-1.el4_8.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2404",
"discovery_date": "2009-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512912"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss regexp heap overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2404"
},
{
"category": "external",
"summary": "RHBZ#512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2404"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:09:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1184"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "nss regexp heap overflow"
},
{
"cve": "CVE-2009-2408",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510251"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a \u0027\\0\u0027 character in a domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox/nss: doesn\u0027t handle NULL in Common Name properly",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2408"
},
{
"category": "external",
"summary": "RHBZ#510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:09:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1184"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox/nss: doesn\u0027t handle NULL in Common Name properly"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:09:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1184"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
}
]
}
RHSA-2009_1560
Vulnerability from csaf_redhat - Published: 2009-11-09 15:04 - Updated: 2024-11-14 10:47Summary
Red Hat Security Advisory: java-1.6.0-sun security update
Notes
Topic
Updated java-1.6.0-sun packages that correct several security issues are
now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and
the Sun Java 6 Software Development Kit.
This update fixes several vulnerabilities in the Sun Java 6 Runtime
Environment and the Sun Java 6 Software Development Kit. These
vulnerabilities are summarized on the "Advance notification of Security
Updates for Java SE" page from Sun Microsystems, listed in the References
section. (CVE-2009-2409, CVE-2009-3728, CVE-2009-3729, CVE-2009-3865,
CVE-2009-3866, CVE-2009-3867, CVE-2009-3868, CVE-2009-3869, CVE-2009-3871,
CVE-2009-3872, CVE-2009-3873, CVE-2009-3874, CVE-2009-3875, CVE-2009-3876,
CVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,
CVE-2009-3883, CVE-2009-3884, CVE-2009-3886)
Users of java-1.6.0-sun should upgrade to these updated packages, which
correct these issues. All running instances of Sun Java must be restarted
for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated java-1.6.0-sun packages that correct several security issues are\nnow available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and\nthe Sun Java 6 Software Development Kit.\n\nThis update fixes several vulnerabilities in the Sun Java 6 Runtime\nEnvironment and the Sun Java 6 Software Development Kit. These\nvulnerabilities are summarized on the \"Advance notification of Security\nUpdates for Java SE\" page from Sun Microsystems, listed in the References\nsection. (CVE-2009-2409, CVE-2009-3728, CVE-2009-3729, CVE-2009-3865,\nCVE-2009-3866, CVE-2009-3867, CVE-2009-3868, CVE-2009-3869, CVE-2009-3871,\nCVE-2009-3872, CVE-2009-3873, CVE-2009-3874, CVE-2009-3875, CVE-2009-3876,\nCVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,\nCVE-2009-3883, CVE-2009-3884, CVE-2009-3886)\n\nUsers of java-1.6.0-sun should upgrade to these updated packages, which\ncorrect these issues. All running instances of Sun Java must be restarted\nfor the update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1560",
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6",
"url": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "530057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530057"
},
{
"category": "external",
"summary": "530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "530062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530062"
},
{
"category": "external",
"summary": "530063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530063"
},
{
"category": "external",
"summary": "530067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530067"
},
{
"category": "external",
"summary": "530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "532904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532904"
},
{
"category": "external",
"summary": "532906",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532906"
},
{
"category": "external",
"summary": "532914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532914"
},
{
"category": "external",
"summary": "533211",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533211"
},
{
"category": "external",
"summary": "533212",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533212"
},
{
"category": "external",
"summary": "533214",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533214"
},
{
"category": "external",
"summary": "533215",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533215"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1560.json"
}
],
"title": "Red Hat Security Advisory: java-1.6.0-sun security update",
"tracking": {
"current_release_date": "2024-11-14T10:47:06+00:00",
"generator": {
"date": "2024-11-14T10:47:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2009:1560",
"initial_release_date": "2009-11-09T15:04:00+00:00",
"revision_history": [
{
"date": "2009-11-09T15:04:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-11-09T10:04:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T10:47:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 4 Extras",
"product": {
"name": "Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.17-1jpp.1.el4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.17-1jpp.2.el5?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.17-1jpp.1.el4?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.17-1jpp.2.el5?arch=i586\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i586"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-3728",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530098"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ICC_Profile file existence detection information leak (6631533)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3728"
},
{
"category": "external",
"summary": "RHBZ#530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3728",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK ICC_Profile file existence detection information leak (6631533)"
},
{
"cve": "CVE-2009-3729",
"discovery_date": "2009-11-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "532904"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before Update 22 and 6 before Update 17 allows remote attackers to cause a denial of service (application crash) via a certain test suite, aka Bug Id 6815780.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JRE TrueType font parsing crash (6815780)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3729"
},
{
"category": "external",
"summary": "RHBZ#532904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532904"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3729",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3729"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JRE TrueType font parsing crash (6815780)"
},
{
"cve": "CVE-2009-3865",
"discovery_date": "2009-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533211"
}
],
"notes": [
{
"category": "description",
"text": "The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary commands via a crafted web page, aka Bug Id 6869752.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: ACE in JRE Deployment Toolkit (6869752)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3865"
},
{
"category": "external",
"summary": "RHBZ#533211",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533211"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3865",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3865"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3865",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3865"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "java-1.6.0-sun: ACE in JRE Deployment Toolkit (6869752)"
},
{
"cve": "CVE-2009-3866",
"discovery_date": "2009-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533212"
}
],
"notes": [
{
"category": "description",
"text": "The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers to execute arbitrary code by modifying a certain JNLP file to have a URL field that points to an unintended trusted application, aka Bug Id 6872824.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: Privilege escalation in the Java Web Start Installer (6872824)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3866"
},
{
"category": "external",
"summary": "RHBZ#533212",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533212"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3866",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3866"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3866",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3866"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-1.6.0-sun: Privilege escalation in the Java Web Start Installer (6872824)"
},
{
"cve": "CVE-2009-3867",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2009-11-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533214"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3867"
},
{
"category": "external",
"summary": "RHBZ#533214",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533214"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3867",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3867"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3867",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3867"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)"
},
{
"cve": "CVE-2009-3868",
"discovery_date": "2009-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533215"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3868"
},
{
"category": "external",
"summary": "RHBZ#533215",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533215"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3868",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3868"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970)"
},
{
"cve": "CVE-2009-3869",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530062"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3869"
},
{
"category": "external",
"summary": "RHBZ#530062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3869",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)"
},
{
"cve": "CVE-2009-3871",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530063"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3871"
},
{
"category": "external",
"summary": "RHBZ#530063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530063"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3871",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)"
},
{
"cve": "CVE-2009-3872",
"discovery_date": "2009-11-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "532906"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JRE JPEG JFIF Decoder issue (6862969)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3872"
},
{
"category": "external",
"summary": "RHBZ#532906",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532906"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3872",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3872"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3872",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3872"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "JRE JPEG JFIF Decoder issue (6862969)"
},
{
"cve": "CVE-2009-3873",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530053"
}
],
"notes": [
{
"category": "description",
"text": "The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JPEG Image Writer quantization problem (6862968)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3873"
},
{
"category": "external",
"summary": "RHBZ#530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3873",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JPEG Image Writer quantization problem (6862968)"
},
{
"cve": "CVE-2009-3874",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530067"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ImageI/O JPEG heap overflow (6874643)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3874"
},
{
"category": "external",
"summary": "RHBZ#530067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530067"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3874",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK ImageI/O JPEG heap overflow (6874643)"
},
{
"cve": "CVE-2009-3875",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530057"
}
],
"notes": [
{
"category": "description",
"text": "The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to \"timing attack vulnerabilities,\" aka Bug Id 6863503.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3875"
},
{
"category": "external",
"summary": "RHBZ#530057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530057"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3875",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3875"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)"
},
{
"cve": "CVE-2009-3876",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3876"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3876",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3877",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3877"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3877",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3879",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530297"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK GraphicsConfiguration information leak(6822057)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3879"
},
{
"category": "external",
"summary": "RHBZ#530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3879",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK GraphicsConfiguration information leak(6822057)"
},
{
"cve": "CVE-2009-3880",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530296"
}
],
"notes": [
{
"category": "description",
"text": "The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK UI logging information leakage(6664512)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3880"
},
{
"category": "external",
"summary": "RHBZ#530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3880",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3880"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK UI logging information leakage(6664512)"
},
{
"cve": "CVE-2009-3881",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530173"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an \"information leak vulnerability,\" aka Bug Id 6636650.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK resurrected classloaders can still have children (6636650)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3881"
},
{
"category": "external",
"summary": "RHBZ#530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3881",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK resurrected classloaders can still have children (6636650)"
},
{
"cve": "CVE-2009-3882",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657026.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3882"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3882",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3882"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3883",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL\u0026F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657138.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3883"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3883",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3884",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530300"
}
],
"notes": [
{
"category": "description",
"text": "The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK zoneinfo file existence information leak (6824265)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3884"
},
{
"category": "external",
"summary": "RHBZ#530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3884",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK zoneinfo file existence information leak (6824265)"
},
{
"cve": "CVE-2009-3886",
"discovery_date": "2009-11-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "532914"
}
],
"notes": [
{
"category": "description",
"text": "The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1) application or (2) applet, which has unspecified impact and attack vectors, related to a \"regression,\" aka Bug Id 6870531.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "REGRESSION: have problem to run JNLP app and applets with signed Jar files (6870531)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3886"
},
{
"category": "external",
"summary": "RHBZ#532914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=532914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3886",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3886"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3886",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3886"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-09T15:04:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1560"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4AS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4ES-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.i586",
"4WS-LACD:java-1.6.0-sun-src-1:1.6.0.17-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Client-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-devel-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-jdbc-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-plugin-1:1.6.0.17-1jpp.2.el5.x86_64",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.i586",
"5Server-Supplementary:java-1.6.0-sun-src-1:1.6.0.17-1jpp.2.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "REGRESSION: have problem to run JNLP app and applets with signed Jar files (6870531)"
}
]
}
RHSA-2009_1186
Vulnerability from csaf_redhat - Published: 2009-07-30 22:20 - Updated: 2024-11-22 03:00Summary
Red Hat Security Advisory: nspr and nss security, bug fix, and enhancement update
Notes
Topic
Updated nspr and nss packages that fix security issues, bugs, and add an
enhancement are now available for Red Hat Enterprise Linux 5.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
The packages with this update are identical to the packages released by
RHBA-2009:1161 on the 20th of July 2009. They are being reissued as a Red
Hat Security Advisory as they fixed a number of security issues that were
made public today. If you are installing these packages for the first time,
they also provide a number of bug fixes and add an enhancement, as detailed
in RHBA-2009:1161. Since the packages are identical, there is no need to
install this update if RHBA-2009:1161 has already been installed.
Details
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities. These facilities include threads, thread
synchronization, normal file and network I/O, interval timing, calendar
time, basic memory management (malloc and free), and shared library linking.
Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications. Applications built with NSS can support SSLv2, SSLv3, TLS,
and other security standards.
These updated packages upgrade NSS from the previous version, 3.12.2, to a
prerelease of version 3.12.4. The version of NSPR has also been upgraded
from 4.7.3 to 4.7.4.
Moxie Marlinspike reported a heap overflow flaw in a regular expression
parser in the NSS library used by browsers such as Mozilla Firefox to match
common names in certificates. A malicious website could present a
carefully-crafted certificate in such a way as to trigger the heap
overflow, leading to a crash or, possibly, arbitrary code execution with
the permissions of the user running the browser. (CVE-2009-2404)
Note: in order to exploit this issue without further user interaction in
Firefox, the carefully-crafted certificate would need to be signed by a
Certificate Authority trusted by Firefox, otherwise Firefox presents the
victim with a warning that the certificate is untrusted. Only if the user
then accepts the certificate will the overflow take place.
Dan Kaminsky discovered flaws in the way browsers such as Firefox handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
Firefox, the attacker could use the certificate during a man-in-the-middle
attack and potentially confuse Firefox into accepting it by mistake.
(CVE-2009-2408)
Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
now disables the use of MD2 and MD4 algorithms inside signatures by
default. (CVE-2009-2409)
All users of nspr and nss are advised to upgrade to these updated packages,
which resolve these issues and add an enhancement.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated nspr and nss packages that fix security issues, bugs, and add an\nenhancement are now available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.\n\nThe packages with this update are identical to the packages released by\nRHBA-2009:1161 on the 20th of July 2009. They are being reissued as a Red\nHat Security Advisory as they fixed a number of security issues that were\nmade public today. If you are installing these packages for the first time,\nthey also provide a number of bug fixes and add an enhancement, as detailed\nin RHBA-2009:1161. Since the packages are identical, there is no need to\ninstall this update if RHBA-2009:1161 has already been installed.",
"title": "Topic"
},
{
"category": "general",
"text": "Netscape Portable Runtime (NSPR) provides platform independence for non-GUI\noperating system facilities. These facilities include threads, thread\nsynchronization, normal file and network I/O, interval timing, calendar\ntime, basic memory management (malloc and free), and shared library linking.\n\nNetwork Security Services (NSS) is a set of libraries designed to support\nthe cross-platform development of security-enabled client and server\napplications. Applications built with NSS can support SSLv2, SSLv3, TLS,\nand other security standards.\n\nThese updated packages upgrade NSS from the previous version, 3.12.2, to a\nprerelease of version 3.12.4. The version of NSPR has also been upgraded\nfrom 4.7.3 to 4.7.4. \n\nMoxie Marlinspike reported a heap overflow flaw in a regular expression\nparser in the NSS library used by browsers such as Mozilla Firefox to match\ncommon names in certificates. A malicious website could present a\ncarefully-crafted certificate in such a way as to trigger the heap\noverflow, leading to a crash or, possibly, arbitrary code execution with\nthe permissions of the user running the browser. (CVE-2009-2404)\n\nNote: in order to exploit this issue without further user interaction in\nFirefox, the carefully-crafted certificate would need to be signed by a\nCertificate Authority trusted by Firefox, otherwise Firefox presents the\nvictim with a warning that the certificate is untrusted. Only if the user\nthen accepts the certificate will the overflow take place.\n\nDan Kaminsky discovered flaws in the way browsers such as Firefox handle\nNULL characters in a certificate. If an attacker is able to get a\ncarefully-crafted certificate signed by a Certificate Authority trusted by\nFirefox, the attacker could use the certificate during a man-in-the-middle\nattack and potentially confuse Firefox into accepting it by mistake.\n(CVE-2009-2408)\n\nDan Kaminsky found that browsers still accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. NSS\nnow disables the use of MD2 and MD4 algorithms inside signatures by\ndefault. (CVE-2009-2409)\n\nAll users of nspr and nss are advised to upgrade to these updated packages,\nwhich resolve these issues and add an enhancement.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1186",
"url": "https://access.redhat.com/errata/RHSA-2009:1186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "http://rhn.redhat.com/errata/RHBA-2009-1161.html",
"url": "http://rhn.redhat.com/errata/RHBA-2009-1161.html"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1186.json"
}
],
"title": "Red Hat Security Advisory: nspr and nss security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-22T03:00:34+00:00",
"generator": {
"date": "2024-11-22T03:00:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2009:1186",
"initial_release_date": "2009-07-30T22:20:00+00:00",
"revision_history": [
{
"date": "2009-07-30T22:20:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-30T18:20:02+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T03:00:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"product_id": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_3.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.i386",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.i386",
"product_id": "nspr-0:4.7.4-1.el5_3.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_3.2?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.src",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.src",
"product_id": "nspr-0:4.7.4-1.el5_3.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=src"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.ia64",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.ia64",
"product_id": "nspr-0:4.7.4-1.el5_3.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_3.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"product_id": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.ppc",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc",
"product_id": "nspr-0:4.7.4-1.el5_3.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_3.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.s390x",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390x",
"product_id": "nspr-0:4.7.4-1.el5_3.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_3.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.s390",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390",
"product_id": "nspr-0:4.7.4-1.el5_3.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2404",
"discovery_date": "2009-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512912"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss regexp heap overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2404"
},
{
"category": "external",
"summary": "RHBZ#512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2404"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:20:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1186"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "nss regexp heap overflow"
},
{
"cve": "CVE-2009-2408",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510251"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a \u0027\\0\u0027 character in a domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox/nss: doesn\u0027t handle NULL in Common Name properly",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2408"
},
{
"category": "external",
"summary": "RHBZ#510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:20:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1186"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox/nss: doesn\u0027t handle NULL in Common Name properly"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:20:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1186"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
}
]
}
RHSA-2010_0054
Vulnerability from csaf_redhat - Published: 2010-01-20 00:23 - Updated: 2024-11-22 03:12Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
Updated openssl packages that fix two security issues are now available for
Red Hat Enterprise Linux 5.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols, as well as a
full-strength, general purpose cryptography library.
It was found that the OpenSSL library did not properly re-initialize its
internal state in the SSL_library_init() function after previous calls to
the CRYPTO_cleanup_all_ex_data() function, which would cause a memory leak
for each subsequent SSL connection. This flaw could cause server
applications that call those functions during reload, such as a combination
of the Apache HTTP Server, mod_ssl, PHP, and cURL, to consume all available
memory, resulting in a denial of service. (CVE-2009-4355)
Dan Kaminsky found that browsers could accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser.
OpenSSL now disables the use of the MD2 algorithm inside signatures by
default. (CVE-2009-2409)
All OpenSSL users should upgrade to these updated packages, which contain
backported patches to resolve these issues. For the update to take effect,
all services linked to the OpenSSL library must be restarted, or the system
rebooted.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openssl packages that fix two security issues are now available for\nRed Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)\nand Transport Layer Security (TLS v1) protocols, as well as a\nfull-strength, general purpose cryptography library.\n\nIt was found that the OpenSSL library did not properly re-initialize its\ninternal state in the SSL_library_init() function after previous calls to\nthe CRYPTO_cleanup_all_ex_data() function, which would cause a memory leak\nfor each subsequent SSL connection. This flaw could cause server\napplications that call those functions during reload, such as a combination\nof the Apache HTTP Server, mod_ssl, PHP, and cURL, to consume all available\nmemory, resulting in a denial of service. (CVE-2009-4355)\n\nDan Kaminsky found that browsers could accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser.\nOpenSSL now disables the use of the MD2 algorithm inside signatures by\ndefault. (CVE-2009-2409)\n\nAll OpenSSL users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. For the update to take effect,\nall services linked to the OpenSSL library must be restarted, or the system\nrebooted.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2010:0054",
"url": "https://access.redhat.com/errata/RHSA-2010:0054"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "546707",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=546707"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0054.json"
}
],
"title": "Red Hat Security Advisory: openssl security update",
"tracking": {
"current_release_date": "2024-11-22T03:12:39+00:00",
"generator": {
"date": "2024-11-22T03:12:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2010:0054",
"initial_release_date": "2010-01-20T00:23:00+00:00",
"revision_history": [
{
"date": "2010-01-20T00:23:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2010-01-19T19:23:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T03:12:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"product": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"product_id": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5_4.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"product": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"product_id": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5_4.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.i386",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i386",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.src",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.src",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.i686",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i686",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"product": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"product_id": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5_4.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"product": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"product_id": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5_4.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"product": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"product_id": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5_4.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.s390",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.src"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.src"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-01-20T00:23:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0054"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-4355",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2009-12-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "546707"
}
],
"notes": [
{
"category": "description",
"text": "Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl significant memory leak in certain SSLv3 requests (DoS)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-4355"
},
{
"category": "external",
"summary": "RHBZ#546707",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=546707"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-4355",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-4355"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-4355",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-4355"
}
],
"release_date": "2010-01-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-01-20T00:23:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0054"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl significant memory leak in certain SSLv3 requests (DoS)"
}
]
}
RHSA-2009_1571
Vulnerability from csaf_redhat - Published: 2009-11-10 19:30 - Updated: 2024-11-14 10:46Summary
Red Hat Security Advisory: java-1.5.0-sun security update
Notes
Topic
Updated java-1.5.0-sun packages that correct several security issues are
now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and
the Sun Java 5 Software Development Kit.
This update fixes several vulnerabilities in the Sun Java 5 Runtime
Environment and the Sun Java 5 Software Development Kit. These
vulnerabilities are summarized on the "Advance notification of Security
Updates for Java SE" page from Sun Microsystems, listed in the References
section. (CVE-2009-2409, CVE-2009-3728, CVE-2009-3873, CVE-2009-3876,
CVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,
CVE-2009-3883, CVE-2009-3884)
Note: This is the final update for the java-1.5.0-sun packages, as the Sun
Java SE Release family 5.0 has now reached End of Service Life. The next
update will remove the java-1.5.0-sun packages.
An alternative to Sun Java SE 5.0 is the Java 2 Technology Edition of the
IBM Developer Kit for Linux, which is available from the Extras and
Supplementary channels on the Red Hat Network. For users of applications
that are capable of using the Java 6 runtime, the OpenJDK open source JDK
is included in Red Hat Enterprise Linux 5 (since 5.3) and is supported by
Red Hat.
Users of java-1.5.0-sun should upgrade to these updated packages, which
correct these issues. All running instances of Sun Java must be restarted
for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated java-1.5.0-sun packages that correct several security issues are\nnow available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and\nthe Sun Java 5 Software Development Kit.\n\nThis update fixes several vulnerabilities in the Sun Java 5 Runtime\nEnvironment and the Sun Java 5 Software Development Kit. These\nvulnerabilities are summarized on the \"Advance notification of Security\nUpdates for Java SE\" page from Sun Microsystems, listed in the References\nsection. (CVE-2009-2409, CVE-2009-3728, CVE-2009-3873, CVE-2009-3876,\nCVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,\nCVE-2009-3883, CVE-2009-3884)\n\nNote: This is the final update for the java-1.5.0-sun packages, as the Sun\nJava SE Release family 5.0 has now reached End of Service Life. The next\nupdate will remove the java-1.5.0-sun packages.\n\nAn alternative to Sun Java SE 5.0 is the Java 2 Technology Edition of the\nIBM Developer Kit for Linux, which is available from the Extras and\nSupplementary channels on the Red Hat Network. For users of applications\nthat are capable of using the Java 6 runtime, the OpenJDK open source JDK\nis included in Red Hat Enterprise Linux 5 (since 5.3) and is supported by\nRed Hat.\n\nUsers of java-1.5.0-sun should upgrade to these updated packages, which\ncorrect these issues. All running instances of Sun Java must be restarted\nfor the update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1571",
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://sunsolve.sun.com/search/document.do?assetkey=118666",
"url": "https://sunsolve.sun.com/search/document.do?assetkey=118666"
},
{
"category": "external",
"summary": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6",
"url": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1571.json"
}
],
"title": "Red Hat Security Advisory: java-1.5.0-sun security update",
"tracking": {
"current_release_date": "2024-11-14T10:46:52+00:00",
"generator": {
"date": "2024-11-14T10:46:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2009:1571",
"initial_release_date": "2009-11-10T19:30:00+00:00",
"revision_history": [
{
"date": "2009-11-10T19:30:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-11-10T14:30:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T10:46:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 4 Extras",
"product": {
"name": "Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"product": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_id": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.22-1jpp.1.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"product": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_id": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.22-1jpp.1.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"product": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_id": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.22-1jpp.1.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
}
],
"category": "architecture",
"name": "i586"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-3728",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530098"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ICC_Profile file existence detection information leak (6631533)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3728"
},
{
"category": "external",
"summary": "RHBZ#530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3728",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK ICC_Profile file existence detection information leak (6631533)"
},
{
"cve": "CVE-2009-3867",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2009-11-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533214"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3867"
},
{
"category": "external",
"summary": "RHBZ#533214",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533214"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3867",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3867"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3867",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3867"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)"
},
{
"cve": "CVE-2009-3868",
"discovery_date": "2009-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533215"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3868"
},
{
"category": "external",
"summary": "RHBZ#533215",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533215"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3868",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3868"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970)"
},
{
"cve": "CVE-2009-3869",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530062"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3869"
},
{
"category": "external",
"summary": "RHBZ#530062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3869",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)"
},
{
"cve": "CVE-2009-3871",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530063"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3871"
},
{
"category": "external",
"summary": "RHBZ#530063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530063"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3871",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)"
},
{
"cve": "CVE-2009-3873",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530053"
}
],
"notes": [
{
"category": "description",
"text": "The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JPEG Image Writer quantization problem (6862968)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3873"
},
{
"category": "external",
"summary": "RHBZ#530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3873",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JPEG Image Writer quantization problem (6862968)"
},
{
"cve": "CVE-2009-3874",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530067"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ImageI/O JPEG heap overflow (6874643)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3874"
},
{
"category": "external",
"summary": "RHBZ#530067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530067"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3874",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK ImageI/O JPEG heap overflow (6874643)"
},
{
"cve": "CVE-2009-3875",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530057"
}
],
"notes": [
{
"category": "description",
"text": "The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to \"timing attack vulnerabilities,\" aka Bug Id 6863503.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3875"
},
{
"category": "external",
"summary": "RHBZ#530057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530057"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3875",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3875"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)"
},
{
"cve": "CVE-2009-3876",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3876"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3876",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3877",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3877"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3877",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3879",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530297"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK GraphicsConfiguration information leak(6822057)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3879"
},
{
"category": "external",
"summary": "RHBZ#530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3879",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK GraphicsConfiguration information leak(6822057)"
},
{
"cve": "CVE-2009-3880",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530296"
}
],
"notes": [
{
"category": "description",
"text": "The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK UI logging information leakage(6664512)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3880"
},
{
"category": "external",
"summary": "RHBZ#530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3880",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3880"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK UI logging information leakage(6664512)"
},
{
"cve": "CVE-2009-3881",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530173"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an \"information leak vulnerability,\" aka Bug Id 6636650.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK resurrected classloaders can still have children (6636650)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3881"
},
{
"category": "external",
"summary": "RHBZ#530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3881",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK resurrected classloaders can still have children (6636650)"
},
{
"cve": "CVE-2009-3882",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657026.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3882"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3882",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3882"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3883",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL\u0026F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657138.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3883"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3883",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3884",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530300"
}
],
"notes": [
{
"category": "description",
"text": "The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK zoneinfo file existence information leak (6824265)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3884"
},
{
"category": "external",
"summary": "RHBZ#530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3884",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK zoneinfo file existence information leak (6824265)"
}
]
}
RHSA-2009:1584
Vulnerability from csaf_redhat - Published: 2009-11-16 15:44 - Updated: 2025-11-21 17:35Summary
Red Hat Security Advisory: java-1.6.0-openjdk security update
Notes
Topic
Updated java-1.6.0-openjdk packages that fix several security issues are
now available for Red Hat Enterprise Linux 5.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
These packages provide the OpenJDK 6 Java Runtime Environment and the
OpenJDK 6 Software Development Kit. The Java Runtime Environment (JRE)
contains the software and tools that users need to run applications written
using the Java programming language.
An integer overflow flaw and buffer overflow flaws were found in the way
the JRE processed image files. An untrusted applet or application could use
these flaws to extend its privileges, allowing it to read and write local
files, as well as to execute local applications with the privileges of the
user running the applet or application. (CVE-2009-3869, CVE-2009-3871,
CVE-2009-3873, CVE-2009-3874)
An information leak was found in the JRE. An untrusted applet or
application could use this flaw to extend its privileges, allowing it to
read and write local files, as well as to execute local applications with
the privileges of the user running the applet or application. (CVE-2009-3881)
It was discovered that the JRE still accepts certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by the JRE. With
this update, the JRE disables the use of the MD2 algorithm inside
signatures by default. (CVE-2009-2409)
A timing attack flaw was found in the way the JRE processed HMAC digests.
This flaw could aid an attacker using forged digital signatures to bypass
authentication checks. (CVE-2009-3875)
Two denial of service flaws were found in the JRE. These could be exploited
in server-side application scenarios that process DER-encoded
(Distinguished Encoding Rules) data. (CVE-2009-3876, CVE-2009-3877)
An information leak was found in the way the JRE handled color profiles. An
attacker could use this flaw to discover the existence of files outside of
the color profiles directory. (CVE-2009-3728)
A flaw in the JRE with passing arrays to the X11GraphicsDevice API was
found. An untrusted applet or application could use this flaw to access and
modify the list of supported graphics configurations. This flaw could also
lead to sensitive information being leaked to unprivileged code.
(CVE-2009-3879)
It was discovered that the JRE passed entire objects to the logging API.
This could lead to sensitive information being leaked to either untrusted
or lower-privileged code from an attacker-controlled applet which has
access to the logging API and is therefore able to manipulate (read and/or
call) the passed objects. (CVE-2009-3880)
Potential information leaks were found in various mutable static variables.
These could be exploited in application scenarios that execute untrusted
scripting code. (CVE-2009-3882, CVE-2009-3883)
An information leak was found in the way the TimeZone.getTimeZone method
was handled. This method could load time zone files that are outside of the
[JRE_HOME]/lib/zi/ directory, allowing a remote attacker to probe the local
file system. (CVE-2009-3884)
Note: The flaws concerning applets in this advisory, CVE-2009-3869,
CVE-2009-3871, CVE-2009-3873, CVE-2009-3874, CVE-2009-3879, CVE-2009-3880,
CVE-2009-3881 and CVE-2009-3884, can only be triggered in
java-1.6.0-openjdk by calling the "appletviewer" application.
All users of java-1.6.0-openjdk are advised to upgrade to these updated
packages, which resolve these issues. All running instances of OpenJDK Java
must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated java-1.6.0-openjdk packages that fix several security issues are\nnow available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "These packages provide the OpenJDK 6 Java Runtime Environment and the\nOpenJDK 6 Software Development Kit. The Java Runtime Environment (JRE)\ncontains the software and tools that users need to run applications written\nusing the Java programming language.\n\nAn integer overflow flaw and buffer overflow flaws were found in the way\nthe JRE processed image files. An untrusted applet or application could use\nthese flaws to extend its privileges, allowing it to read and write local\nfiles, as well as to execute local applications with the privileges of the\nuser running the applet or application. (CVE-2009-3869, CVE-2009-3871,\nCVE-2009-3873, CVE-2009-3874)\n\nAn information leak was found in the JRE. An untrusted applet or\napplication could use this flaw to extend its privileges, allowing it to\nread and write local files, as well as to execute local applications with\nthe privileges of the user running the applet or application. (CVE-2009-3881)\n\nIt was discovered that the JRE still accepts certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by the JRE. With\nthis update, the JRE disables the use of the MD2 algorithm inside\nsignatures by default. (CVE-2009-2409)\n\nA timing attack flaw was found in the way the JRE processed HMAC digests.\nThis flaw could aid an attacker using forged digital signatures to bypass\nauthentication checks. (CVE-2009-3875)\n\nTwo denial of service flaws were found in the JRE. These could be exploited\nin server-side application scenarios that process DER-encoded\n(Distinguished Encoding Rules) data. (CVE-2009-3876, CVE-2009-3877)\n\nAn information leak was found in the way the JRE handled color profiles. An\nattacker could use this flaw to discover the existence of files outside of\nthe color profiles directory. (CVE-2009-3728)\n\nA flaw in the JRE with passing arrays to the X11GraphicsDevice API was\nfound. An untrusted applet or application could use this flaw to access and\nmodify the list of supported graphics configurations. This flaw could also\nlead to sensitive information being leaked to unprivileged code.\n(CVE-2009-3879)\n\nIt was discovered that the JRE passed entire objects to the logging API.\nThis could lead to sensitive information being leaked to either untrusted\nor lower-privileged code from an attacker-controlled applet which has\naccess to the logging API and is therefore able to manipulate (read and/or\ncall) the passed objects. (CVE-2009-3880)\n\nPotential information leaks were found in various mutable static variables.\nThese could be exploited in application scenarios that execute untrusted\nscripting code. (CVE-2009-3882, CVE-2009-3883)\n\nAn information leak was found in the way the TimeZone.getTimeZone method\nwas handled. This method could load time zone files that are outside of the\n[JRE_HOME]/lib/zi/ directory, allowing a remote attacker to probe the local\nfile system. (CVE-2009-3884)\n\nNote: The flaws concerning applets in this advisory, CVE-2009-3869,\nCVE-2009-3871, CVE-2009-3873, CVE-2009-3874, CVE-2009-3879, CVE-2009-3880,\nCVE-2009-3881 and CVE-2009-3884, can only be triggered in\njava-1.6.0-openjdk by calling the \"appletviewer\" application.\n\nAll users of java-1.6.0-openjdk are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK Java\nmust be restarted for the update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1584",
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
},
{
"category": "external",
"summary": "530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6",
"url": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "530057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530057"
},
{
"category": "external",
"summary": "530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "530062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530062"
},
{
"category": "external",
"summary": "530063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530063"
},
{
"category": "external",
"summary": "530067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530067"
},
{
"category": "external",
"summary": "530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1584.json"
}
],
"title": "Red Hat Security Advisory: java-1.6.0-openjdk security update",
"tracking": {
"current_release_date": "2025-11-21T17:35:28+00:00",
"generator": {
"date": "2025-11-21T17:35:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1584",
"initial_release_date": "2009-11-16T15:44:00+00:00",
"revision_history": [
{
"date": "2009-11-16T15:44:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-11-16T10:44:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:35:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"product": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.7.b09.el5?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-3728",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530098"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ICC_Profile file existence detection information leak (6631533)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3728"
},
{
"category": "external",
"summary": "RHBZ#530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3728",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK ICC_Profile file existence detection information leak (6631533)"
},
{
"cve": "CVE-2009-3869",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530062"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3869"
},
{
"category": "external",
"summary": "RHBZ#530062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3869",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)"
},
{
"cve": "CVE-2009-3871",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530063"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3871"
},
{
"category": "external",
"summary": "RHBZ#530063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530063"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3871",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)"
},
{
"cve": "CVE-2009-3873",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530053"
}
],
"notes": [
{
"category": "description",
"text": "The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JPEG Image Writer quantization problem (6862968)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3873"
},
{
"category": "external",
"summary": "RHBZ#530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3873",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JPEG Image Writer quantization problem (6862968)"
},
{
"cve": "CVE-2009-3874",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530067"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ImageI/O JPEG heap overflow (6874643)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3874"
},
{
"category": "external",
"summary": "RHBZ#530067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530067"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3874",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK ImageI/O JPEG heap overflow (6874643)"
},
{
"cve": "CVE-2009-3875",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530057"
}
],
"notes": [
{
"category": "description",
"text": "The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to \"timing attack vulnerabilities,\" aka Bug Id 6863503.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3875"
},
{
"category": "external",
"summary": "RHBZ#530057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530057"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3875",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3875"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)"
},
{
"cve": "CVE-2009-3876",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3876"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3876",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3877",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3877"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3877",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3879",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530297"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK GraphicsConfiguration information leak(6822057)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3879"
},
{
"category": "external",
"summary": "RHBZ#530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3879",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK GraphicsConfiguration information leak(6822057)"
},
{
"cve": "CVE-2009-3880",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530296"
}
],
"notes": [
{
"category": "description",
"text": "The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK UI logging information leakage(6664512)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3880"
},
{
"category": "external",
"summary": "RHBZ#530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3880",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3880"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK UI logging information leakage(6664512)"
},
{
"cve": "CVE-2009-3881",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530173"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an \"information leak vulnerability,\" aka Bug Id 6636650.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK resurrected classloaders can still have children (6636650)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3881"
},
{
"category": "external",
"summary": "RHBZ#530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3881",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK resurrected classloaders can still have children (6636650)"
},
{
"cve": "CVE-2009-3882",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657026.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3882"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3882",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3882"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3883",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL\u0026F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657138.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3883"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3883",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3884",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530300"
}
],
"notes": [
{
"category": "description",
"text": "The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK zoneinfo file existence information leak (6824265)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3884"
},
{
"category": "external",
"summary": "RHBZ#530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3884",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK zoneinfo file existence information leak (6824265)"
}
]
}
RHSA-2009:1186
Vulnerability from csaf_redhat - Published: 2009-07-30 22:20 - Updated: 2025-11-21 17:34Summary
Red Hat Security Advisory: nspr and nss security, bug fix, and enhancement update
Notes
Topic
Updated nspr and nss packages that fix security issues, bugs, and add an
enhancement are now available for Red Hat Enterprise Linux 5.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
The packages with this update are identical to the packages released by
RHBA-2009:1161 on the 20th of July 2009. They are being reissued as a Red
Hat Security Advisory as they fixed a number of security issues that were
made public today. If you are installing these packages for the first time,
they also provide a number of bug fixes and add an enhancement, as detailed
in RHBA-2009:1161. Since the packages are identical, there is no need to
install this update if RHBA-2009:1161 has already been installed.
Details
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities. These facilities include threads, thread
synchronization, normal file and network I/O, interval timing, calendar
time, basic memory management (malloc and free), and shared library linking.
Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications. Applications built with NSS can support SSLv2, SSLv3, TLS,
and other security standards.
These updated packages upgrade NSS from the previous version, 3.12.2, to a
prerelease of version 3.12.4. The version of NSPR has also been upgraded
from 4.7.3 to 4.7.4.
Moxie Marlinspike reported a heap overflow flaw in a regular expression
parser in the NSS library used by browsers such as Mozilla Firefox to match
common names in certificates. A malicious website could present a
carefully-crafted certificate in such a way as to trigger the heap
overflow, leading to a crash or, possibly, arbitrary code execution with
the permissions of the user running the browser. (CVE-2009-2404)
Note: in order to exploit this issue without further user interaction in
Firefox, the carefully-crafted certificate would need to be signed by a
Certificate Authority trusted by Firefox, otherwise Firefox presents the
victim with a warning that the certificate is untrusted. Only if the user
then accepts the certificate will the overflow take place.
Dan Kaminsky discovered flaws in the way browsers such as Firefox handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
Firefox, the attacker could use the certificate during a man-in-the-middle
attack and potentially confuse Firefox into accepting it by mistake.
(CVE-2009-2408)
Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
now disables the use of MD2 and MD4 algorithms inside signatures by
default. (CVE-2009-2409)
All users of nspr and nss are advised to upgrade to these updated packages,
which resolve these issues and add an enhancement.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated nspr and nss packages that fix security issues, bugs, and add an\nenhancement are now available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.\n\nThe packages with this update are identical to the packages released by\nRHBA-2009:1161 on the 20th of July 2009. They are being reissued as a Red\nHat Security Advisory as they fixed a number of security issues that were\nmade public today. If you are installing these packages for the first time,\nthey also provide a number of bug fixes and add an enhancement, as detailed\nin RHBA-2009:1161. Since the packages are identical, there is no need to\ninstall this update if RHBA-2009:1161 has already been installed.",
"title": "Topic"
},
{
"category": "general",
"text": "Netscape Portable Runtime (NSPR) provides platform independence for non-GUI\noperating system facilities. These facilities include threads, thread\nsynchronization, normal file and network I/O, interval timing, calendar\ntime, basic memory management (malloc and free), and shared library linking.\n\nNetwork Security Services (NSS) is a set of libraries designed to support\nthe cross-platform development of security-enabled client and server\napplications. Applications built with NSS can support SSLv2, SSLv3, TLS,\nand other security standards.\n\nThese updated packages upgrade NSS from the previous version, 3.12.2, to a\nprerelease of version 3.12.4. The version of NSPR has also been upgraded\nfrom 4.7.3 to 4.7.4. \n\nMoxie Marlinspike reported a heap overflow flaw in a regular expression\nparser in the NSS library used by browsers such as Mozilla Firefox to match\ncommon names in certificates. A malicious website could present a\ncarefully-crafted certificate in such a way as to trigger the heap\noverflow, leading to a crash or, possibly, arbitrary code execution with\nthe permissions of the user running the browser. (CVE-2009-2404)\n\nNote: in order to exploit this issue without further user interaction in\nFirefox, the carefully-crafted certificate would need to be signed by a\nCertificate Authority trusted by Firefox, otherwise Firefox presents the\nvictim with a warning that the certificate is untrusted. Only if the user\nthen accepts the certificate will the overflow take place.\n\nDan Kaminsky discovered flaws in the way browsers such as Firefox handle\nNULL characters in a certificate. If an attacker is able to get a\ncarefully-crafted certificate signed by a Certificate Authority trusted by\nFirefox, the attacker could use the certificate during a man-in-the-middle\nattack and potentially confuse Firefox into accepting it by mistake.\n(CVE-2009-2408)\n\nDan Kaminsky found that browsers still accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. NSS\nnow disables the use of MD2 and MD4 algorithms inside signatures by\ndefault. (CVE-2009-2409)\n\nAll users of nspr and nss are advised to upgrade to these updated packages,\nwhich resolve these issues and add an enhancement.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1186",
"url": "https://access.redhat.com/errata/RHSA-2009:1186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "http://rhn.redhat.com/errata/RHBA-2009-1161.html",
"url": "http://rhn.redhat.com/errata/RHBA-2009-1161.html"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1186.json"
}
],
"title": "Red Hat Security Advisory: nspr and nss security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-11-21T17:34:58+00:00",
"generator": {
"date": "2025-11-21T17:34:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1186",
"initial_release_date": "2009-07-30T22:20:00+00:00",
"revision_history": [
{
"date": "2009-07-30T22:20:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-30T18:20:02+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:34:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"product_id": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_3.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.i386",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.i386",
"product_id": "nspr-0:4.7.4-1.el5_3.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_3.2?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.src",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.src",
"product_id": "nspr-0:4.7.4-1.el5_3.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=src"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.ia64",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.ia64",
"product_id": "nspr-0:4.7.4-1.el5_3.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_3.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"product_id": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.ppc",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc",
"product_id": "nspr-0:4.7.4-1.el5_3.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_3.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.s390x",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390x",
"product_id": "nspr-0:4.7.4-1.el5_3.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_3.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"product_id": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_3.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_3.1.s390",
"product": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390",
"product_id": "nspr-0:4.7.4-1.el5_3.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_3.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_3.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_3.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_3.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_3.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"product_id": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_3.2?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2404",
"discovery_date": "2009-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512912"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss regexp heap overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2404"
},
{
"category": "external",
"summary": "RHBZ#512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2404"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:20:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1186"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "nss regexp heap overflow"
},
{
"cve": "CVE-2009-2408",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510251"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a \u0027\\0\u0027 character in a domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox/nss: doesn\u0027t handle NULL in Common Name properly",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2408"
},
{
"category": "external",
"summary": "RHBZ#510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:20:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1186"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox/nss: doesn\u0027t handle NULL in Common Name properly"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:20:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1186"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.src",
"5Client-Workstation:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client-Workstation:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client-Workstation:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client-Workstation:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nspr-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-0:4.7.4-1.el5_3.1.src",
"5Client:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Client:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Client:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Client:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nspr-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-0:4.7.4-1.el5_3.1.src",
"5Server:nspr-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-debuginfo-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.i386",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ia64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.ppc64",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.s390x",
"5Server:nspr-devel-0:4.7.4-1.el5_3.1.x86_64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.src",
"5Server:nss-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-debuginfo-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.ppc64",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_3.2.x86_64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.i386",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ia64",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.ppc",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.s390x",
"5Server:nss-tools-0:3.12.3.99.3-1.el5_3.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
}
]
}
RHSA-2010_0166
Vulnerability from csaf_redhat - Published: 2010-03-25 10:19 - Updated: 2024-11-14 10:48Summary
Red Hat Security Advisory: gnutls security update
Notes
Topic
Updated gnutls packages that fix two security issues are now available for
Red Hat Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
The GnuTLS library provides support for cryptographic algorithms and for
protocols such as Transport Layer Security (TLS).
A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure
Sockets Layer) protocols handled session renegotiation. A man-in-the-middle
attacker could use this flaw to prefix arbitrary plain text to a client's
session (for example, an HTTPS connection to a website). This could force
the server to process an attacker's request as if authenticated using the
victim's credentials. This update addresses this flaw by implementing the
TLS Renegotiation Indication Extension, as defined in RFC 5746.
(CVE-2009-3555)
Refer to the following Knowledgebase article for additional details about
the CVE-2009-3555 flaw: http://kbase.redhat.com/faq/docs/DOC-20491
Dan Kaminsky found that browsers could accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. GnuTLS
now disables the use of the MD2 algorithm inside signatures by default.
(CVE-2009-2409)
Users of GnuTLS are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. For the update to take
effect, all applications linked to the GnuTLS library must be restarted, or
the system rebooted.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated gnutls packages that fix two security issues are now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The GnuTLS library provides support for cryptographic algorithms and for\nprotocols such as Transport Layer Security (TLS).\n\nA flaw was found in the way the TLS/SSL (Transport Layer Security/Secure\nSockets Layer) protocols handled session renegotiation. A man-in-the-middle\nattacker could use this flaw to prefix arbitrary plain text to a client\u0027s\nsession (for example, an HTTPS connection to a website). This could force\nthe server to process an attacker\u0027s request as if authenticated using the\nvictim\u0027s credentials. This update addresses this flaw by implementing the\nTLS Renegotiation Indication Extension, as defined in RFC 5746.\n(CVE-2009-3555)\n\nRefer to the following Knowledgebase article for additional details about\nthe CVE-2009-3555 flaw: http://kbase.redhat.com/faq/docs/DOC-20491\n\nDan Kaminsky found that browsers could accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. GnuTLS\nnow disables the use of the MD2 algorithm inside signatures by default.\n(CVE-2009-2409)\n\nUsers of GnuTLS are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. For the update to take\neffect, all applications linked to the GnuTLS library must be restarted, or\nthe system rebooted.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2010:0166",
"url": "https://access.redhat.com/errata/RHSA-2010:0166"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "http://kbase.redhat.com/faq/docs/DOC-20491",
"url": "http://kbase.redhat.com/faq/docs/DOC-20491"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "533125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0166.json"
}
],
"title": "Red Hat Security Advisory: gnutls security update",
"tracking": {
"current_release_date": "2024-11-14T10:48:20+00:00",
"generator": {
"date": "2024-11-14T10:48:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2010:0166",
"initial_release_date": "2010-03-25T10:19:00+00:00",
"revision_history": [
{
"date": "2010-03-25T10:19:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2010-03-25T06:19:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T10:48:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"product": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"product_id": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@1.4.1-3.el5_4.8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.i386",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.i386",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"product": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"product_id": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@1.4.1-3.el5_4.8?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.src",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.src",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"product": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"product_id": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@1.4.1-3.el5_4.8?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"product": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"product_id": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@1.4.1-3.el5_4.8?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"product": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"product_id": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@1.4.1-3.el5_4.8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"product": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"product_id": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@1.4.1-3.el5_4.8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:1.4.1-3.el5_4.8.s390",
"product": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390",
"product_id": "gnutls-0:1.4.1-3.el5_4.8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@1.4.1-3.el5_4.8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"product": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"product_id": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@1.4.1-3.el5_4.8?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.src"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.src"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
},
"product_reference": "gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-03-25T10:19:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-3555",
"cwe": {
"id": "CWE-300",
"name": "Channel Accessible by Non-Endpoint"
},
"discovery_date": "2009-10-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533125"
}
],
"notes": [
{
"category": "description",
"text": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "TLS: MITM attacks via session renegotiation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article:\nhttps://access.redhat.com/articles/20490",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3555"
},
{
"category": "external",
"summary": "RHBZ#533125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3555",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3555"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555"
}
],
"release_date": "2009-11-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-03-25T10:19:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client-Workstation:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client-Workstation:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-0:1.4.1-3.el5_4.8.src",
"5Client:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Client:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-0:1.4.1-3.el5_4.8.src",
"5Server:gnutls-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-debuginfo-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.ppc64",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-devel-0:1.4.1-3.el5_4.8.x86_64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.i386",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ia64",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.ppc",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.s390x",
"5Server:gnutls-utils-0:1.4.1-3.el5_4.8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "TLS: MITM attacks via session renegotiation"
}
]
}
RHSA-2009:1571
Vulnerability from csaf_redhat - Published: 2009-11-10 19:30 - Updated: 2025-11-21 17:35Summary
Red Hat Security Advisory: java-1.5.0-sun security update
Notes
Topic
Updated java-1.5.0-sun packages that correct several security issues are
now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and
the Sun Java 5 Software Development Kit.
This update fixes several vulnerabilities in the Sun Java 5 Runtime
Environment and the Sun Java 5 Software Development Kit. These
vulnerabilities are summarized on the "Advance notification of Security
Updates for Java SE" page from Sun Microsystems, listed in the References
section. (CVE-2009-2409, CVE-2009-3728, CVE-2009-3873, CVE-2009-3876,
CVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,
CVE-2009-3883, CVE-2009-3884)
Note: This is the final update for the java-1.5.0-sun packages, as the Sun
Java SE Release family 5.0 has now reached End of Service Life. The next
update will remove the java-1.5.0-sun packages.
An alternative to Sun Java SE 5.0 is the Java 2 Technology Edition of the
IBM Developer Kit for Linux, which is available from the Extras and
Supplementary channels on the Red Hat Network. For users of applications
that are capable of using the Java 6 runtime, the OpenJDK open source JDK
is included in Red Hat Enterprise Linux 5 (since 5.3) and is supported by
Red Hat.
Users of java-1.5.0-sun should upgrade to these updated packages, which
correct these issues. All running instances of Sun Java must be restarted
for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated java-1.5.0-sun packages that correct several security issues are\nnow available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and\nthe Sun Java 5 Software Development Kit.\n\nThis update fixes several vulnerabilities in the Sun Java 5 Runtime\nEnvironment and the Sun Java 5 Software Development Kit. These\nvulnerabilities are summarized on the \"Advance notification of Security\nUpdates for Java SE\" page from Sun Microsystems, listed in the References\nsection. (CVE-2009-2409, CVE-2009-3728, CVE-2009-3873, CVE-2009-3876,\nCVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882,\nCVE-2009-3883, CVE-2009-3884)\n\nNote: This is the final update for the java-1.5.0-sun packages, as the Sun\nJava SE Release family 5.0 has now reached End of Service Life. The next\nupdate will remove the java-1.5.0-sun packages.\n\nAn alternative to Sun Java SE 5.0 is the Java 2 Technology Edition of the\nIBM Developer Kit for Linux, which is available from the Extras and\nSupplementary channels on the Red Hat Network. For users of applications\nthat are capable of using the Java 6 runtime, the OpenJDK open source JDK\nis included in Red Hat Enterprise Linux 5 (since 5.3) and is supported by\nRed Hat.\n\nUsers of java-1.5.0-sun should upgrade to these updated packages, which\ncorrect these issues. All running instances of Sun Java must be restarted\nfor the update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1571",
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
},
{
"category": "external",
"summary": "530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://sunsolve.sun.com/search/document.do?assetkey=118666",
"url": "https://sunsolve.sun.com/search/document.do?assetkey=118666"
},
{
"category": "external",
"summary": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6",
"url": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1571.json"
}
],
"title": "Red Hat Security Advisory: java-1.5.0-sun security update",
"tracking": {
"current_release_date": "2025-11-21T17:35:26+00:00",
"generator": {
"date": "2025-11-21T17:35:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1571",
"initial_release_date": "2009-11-10T19:30:00+00:00",
"revision_history": [
{
"date": "2009-11-10T19:30:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-11-10T14:30:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:35:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 4 Extras",
"product": {
"name": "Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"product": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_id": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.22-1jpp.1.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"product": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_id": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.22-1jpp.1.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"product": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_id": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.22-1jpp.1.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el4?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-plugin@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-jdbc@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-demo@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-src@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
},
{
"category": "product_version",
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"product": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"product_id": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.5.0-sun-devel@1.5.0.22-1jpp.1.el5?arch=i586"
}
}
}
],
"category": "architecture",
"name": "i586"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
},
"product_reference": "java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"relates_to_product_reference": "5Server-Supplementary"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-3728",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530098"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ICC_Profile file existence detection information leak (6631533)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3728"
},
{
"category": "external",
"summary": "RHBZ#530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3728",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK ICC_Profile file existence detection information leak (6631533)"
},
{
"cve": "CVE-2009-3867",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2009-11-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533214"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3867"
},
{
"category": "external",
"summary": "RHBZ#533214",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533214"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3867",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3867"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3867",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3867"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)"
},
{
"cve": "CVE-2009-3868",
"discovery_date": "2009-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533215"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3868"
},
{
"category": "external",
"summary": "RHBZ#533215",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533215"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3868",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3868"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970)"
},
{
"cve": "CVE-2009-3869",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530062"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3869"
},
{
"category": "external",
"summary": "RHBZ#530062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3869",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)"
},
{
"cve": "CVE-2009-3871",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530063"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3871"
},
{
"category": "external",
"summary": "RHBZ#530063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530063"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3871",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)"
},
{
"cve": "CVE-2009-3873",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530053"
}
],
"notes": [
{
"category": "description",
"text": "The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JPEG Image Writer quantization problem (6862968)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3873"
},
{
"category": "external",
"summary": "RHBZ#530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3873",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JPEG Image Writer quantization problem (6862968)"
},
{
"cve": "CVE-2009-3874",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530067"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ImageI/O JPEG heap overflow (6874643)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3874"
},
{
"category": "external",
"summary": "RHBZ#530067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530067"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3874",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK ImageI/O JPEG heap overflow (6874643)"
},
{
"cve": "CVE-2009-3875",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530057"
}
],
"notes": [
{
"category": "description",
"text": "The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to \"timing attack vulnerabilities,\" aka Bug Id 6863503.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3875"
},
{
"category": "external",
"summary": "RHBZ#530057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530057"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3875",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3875"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)"
},
{
"cve": "CVE-2009-3876",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3876"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3876",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3877",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3877"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3877",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3879",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530297"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK GraphicsConfiguration information leak(6822057)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3879"
},
{
"category": "external",
"summary": "RHBZ#530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3879",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK GraphicsConfiguration information leak(6822057)"
},
{
"cve": "CVE-2009-3880",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530296"
}
],
"notes": [
{
"category": "description",
"text": "The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK UI logging information leakage(6664512)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3880"
},
{
"category": "external",
"summary": "RHBZ#530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3880",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3880"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK UI logging information leakage(6664512)"
},
{
"cve": "CVE-2009-3881",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530173"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an \"information leak vulnerability,\" aka Bug Id 6636650.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK resurrected classloaders can still have children (6636650)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3881"
},
{
"category": "external",
"summary": "RHBZ#530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3881",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK resurrected classloaders can still have children (6636650)"
},
{
"cve": "CVE-2009-3882",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657026.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3882"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3882",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3882"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3883",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL\u0026F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657138.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3883"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3883",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3884",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530300"
}
],
"notes": [
{
"category": "description",
"text": "The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK zoneinfo file existence information leak (6824265)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3884"
},
{
"category": "external",
"summary": "RHBZ#530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3884",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-10T19:30:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1571"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4AS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4AS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4Desktop-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4Desktop-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4ES-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4ES-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el4.x86_64",
"4WS-LACD:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.i586",
"4WS-LACD:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el4.x86_64",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Client-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Client-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-demo-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-jdbc-0:1.5.0.22-1jpp.1.el5.x86_64",
"5Server-Supplementary:java-1.5.0-sun-plugin-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.i586",
"5Server-Supplementary:java-1.5.0-sun-src-0:1.5.0.22-1jpp.1.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK zoneinfo file existence information leak (6824265)"
}
]
}
RHSA-2010:0163
Vulnerability from csaf_redhat - Published: 2010-03-25 09:11 - Updated: 2025-11-21 17:35Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
Updated openssl packages that fix several security issues are now available
for Red Hat Enterprise Linux 3 and 4.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols, as well as a
full-strength, general purpose cryptography library.
A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure
Sockets Layer) protocols handled session renegotiation. A man-in-the-middle
attacker could use this flaw to prefix arbitrary plain text to a client's
session (for example, an HTTPS connection to a website). This could force
the server to process an attacker's request as if authenticated using the
victim's credentials. This update addresses this flaw by implementing the
TLS Renegotiation Indication Extension, as defined in RFC 5746.
(CVE-2009-3555)
Refer to the following Knowledgebase article for additional details about
the CVE-2009-3555 flaw: http://kbase.redhat.com/faq/docs/DOC-20491
Dan Kaminsky found that browsers could accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser.
OpenSSL now disables the use of the MD2 algorithm inside signatures by
default. (CVE-2009-2409)
An input validation flaw was found in the handling of the BMPString and
UniversalString ASN1 string types in OpenSSL's ASN1_STRING_print_ex()
function. An attacker could use this flaw to create a specially-crafted
X.509 certificate that could cause applications using the affected function
to crash when printing certificate contents. (CVE-2009-0590)
Note: The affected function is rarely used. No application shipped with Red
Hat Enterprise Linux calls this function, for example.
All OpenSSL users should upgrade to these updated packages, which contain
backported patches to resolve these issues. For the update to take effect,
all services linked to the OpenSSL library must be restarted, or the system
rebooted.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openssl packages that fix several security issues are now available\nfor Red Hat Enterprise Linux 3 and 4.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)\nand Transport Layer Security (TLS v1) protocols, as well as a\nfull-strength, general purpose cryptography library.\n\nA flaw was found in the way the TLS/SSL (Transport Layer Security/Secure\nSockets Layer) protocols handled session renegotiation. A man-in-the-middle\nattacker could use this flaw to prefix arbitrary plain text to a client\u0027s\nsession (for example, an HTTPS connection to a website). This could force\nthe server to process an attacker\u0027s request as if authenticated using the\nvictim\u0027s credentials. This update addresses this flaw by implementing the\nTLS Renegotiation Indication Extension, as defined in RFC 5746.\n(CVE-2009-3555)\n\nRefer to the following Knowledgebase article for additional details about\nthe CVE-2009-3555 flaw: http://kbase.redhat.com/faq/docs/DOC-20491\n\nDan Kaminsky found that browsers could accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser.\nOpenSSL now disables the use of the MD2 algorithm inside signatures by\ndefault. (CVE-2009-2409)\n\nAn input validation flaw was found in the handling of the BMPString and\nUniversalString ASN1 string types in OpenSSL\u0027s ASN1_STRING_print_ex()\nfunction. An attacker could use this flaw to create a specially-crafted\nX.509 certificate that could cause applications using the affected function\nto crash when printing certificate contents. (CVE-2009-0590)\n\nNote: The affected function is rarely used. No application shipped with Red\nHat Enterprise Linux calls this function, for example.\n\nAll OpenSSL users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. For the update to take effect,\nall services linked to the OpenSSL library must be restarted, or the system\nrebooted.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2010:0163",
"url": "https://access.redhat.com/errata/RHSA-2010:0163"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "492304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492304"
},
{
"category": "external",
"summary": "http://kbase.redhat.com/faq/docs/DOC-20491",
"url": "http://kbase.redhat.com/faq/docs/DOC-20491"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "533125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0163.json"
}
],
"title": "Red Hat Security Advisory: openssl security update",
"tracking": {
"current_release_date": "2025-11-21T17:35:57+00:00",
"generator": {
"date": "2025-11-21T17:35:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2010:0163",
"initial_release_date": "2010-03-25T09:11:00+00:00",
"revision_history": [
{
"date": "2010-03-25T09:11:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2010-03-25T05:15:38+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:35:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.ia64",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.ia64",
"product_id": "openssl-devel-0:0.9.7a-33.26.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.ia64",
"product": {
"name": "openssl-0:0.9.7a-33.26.ia64",
"product_id": "openssl-0:0.9.7a-33.26.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.ia64",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.ia64",
"product_id": "openssl-perl-0:0.9.7a-33.26.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.i686",
"product": {
"name": "openssl-0:0.9.7a-33.26.i686",
"product_id": "openssl-0:0.9.7a-33.26.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.x86_64",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.x86_64",
"product_id": "openssl-devel-0:0.9.7a-33.26.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.x86_64",
"product": {
"name": "openssl-0:0.9.7a-33.26.x86_64",
"product_id": "openssl-0:0.9.7a-33.26.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.x86_64",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.x86_64",
"product_id": "openssl-perl-0:0.9.7a-33.26.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.i386",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.i386",
"product_id": "openssl-devel-0:0.9.7a-33.26.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.i386",
"product": {
"name": "openssl-0:0.9.7a-33.26.i386",
"product_id": "openssl-0:0.9.7a-33.26.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.i386",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.i386",
"product_id": "openssl-perl-0:0.9.7a-33.26.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.src",
"product": {
"name": "openssl-0:0.9.7a-33.26.src",
"product_id": "openssl-0:0.9.7a-33.26.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=src"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.ppc",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.ppc",
"product_id": "openssl-devel-0:0.9.7a-33.26.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.ppc",
"product": {
"name": "openssl-0:0.9.7a-33.26.ppc",
"product_id": "openssl-0:0.9.7a-33.26.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.ppc",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.ppc",
"product_id": "openssl-perl-0:0.9.7a-33.26.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.ppc64",
"product": {
"name": "openssl-0:0.9.7a-33.26.ppc64",
"product_id": "openssl-0:0.9.7a-33.26.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.s390x",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.s390x",
"product_id": "openssl-devel-0:0.9.7a-33.26.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.s390x",
"product": {
"name": "openssl-0:0.9.7a-33.26.s390x",
"product_id": "openssl-0:0.9.7a-33.26.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.s390x",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.s390x",
"product_id": "openssl-perl-0:0.9.7a-33.26.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-0:0.9.7a-33.26.s390",
"product": {
"name": "openssl-0:0.9.7a-33.26.s390",
"product_id": "openssl-0:0.9.7a-33.26.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-33.26?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"product_id": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-33.26?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-33.26.s390",
"product": {
"name": "openssl-devel-0:0.9.7a-33.26.s390",
"product_id": "openssl-devel-0:0.9.7a-33.26.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-33.26?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-33.26.s390",
"product": {
"name": "openssl-perl-0:0.9.7a-33.26.s390",
"product_id": "openssl-perl-0:0.9.7a-33.26.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-33.26?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"product": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"product_id": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.7a-43.17.el4_8.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"product": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"product_id": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.7a-43.17.el4_8.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"product": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"product_id": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.7a-43.17.el4_8.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"product": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"product_id": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.7a-43.17.el4_8.5?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.src"
},
"product_reference": "openssl-0:0.9.7a-33.26.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-devel-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:openssl-perl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i686 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.src"
},
"product_reference": "openssl-0:0.9.7a-33.26.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.src"
},
"product_reference": "openssl-0:0.9.7a-33.26.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-devel-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:openssl-perl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.src"
},
"product_reference": "openssl-0:0.9.7a-33.26.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.i686 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.i686",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.ppc64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-devel-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-33.26.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:openssl-perl-0:0.9.7a-33.26.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-33.26.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.src"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.src"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.src"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
},
"product_reference": "openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-0590",
"discovery_date": "2009-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "492304"
}
],
"notes": [
{
"category": "description",
"text": "The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: ASN1 printing crash",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0590"
},
{
"category": "external",
"summary": "RHBZ#492304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=492304"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0590",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0590"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0590",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0590"
}
],
"release_date": "2009-03-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-03-25T09:11:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0163"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: ASN1 printing crash"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-03-25T09:11:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0163"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-3555",
"cwe": {
"id": "CWE-300",
"name": "Channel Accessible by Non-Endpoint"
},
"discovery_date": "2009-10-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "533125"
}
],
"notes": [
{
"category": "description",
"text": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "TLS: MITM attacks via session renegotiation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article:\nhttps://access.redhat.com/articles/20490",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3555"
},
{
"category": "external",
"summary": "RHBZ#533125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3555",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3555"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555"
}
],
"release_date": "2009-11-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-03-25T09:11:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0163"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:openssl-0:0.9.7a-33.26.i386",
"3AS:openssl-0:0.9.7a-33.26.i686",
"3AS:openssl-0:0.9.7a-33.26.ia64",
"3AS:openssl-0:0.9.7a-33.26.ppc",
"3AS:openssl-0:0.9.7a-33.26.ppc64",
"3AS:openssl-0:0.9.7a-33.26.s390",
"3AS:openssl-0:0.9.7a-33.26.s390x",
"3AS:openssl-0:0.9.7a-33.26.src",
"3AS:openssl-0:0.9.7a-33.26.x86_64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3AS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3AS:openssl-devel-0:0.9.7a-33.26.i386",
"3AS:openssl-devel-0:0.9.7a-33.26.ia64",
"3AS:openssl-devel-0:0.9.7a-33.26.ppc",
"3AS:openssl-devel-0:0.9.7a-33.26.s390",
"3AS:openssl-devel-0:0.9.7a-33.26.s390x",
"3AS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3AS:openssl-perl-0:0.9.7a-33.26.i386",
"3AS:openssl-perl-0:0.9.7a-33.26.ia64",
"3AS:openssl-perl-0:0.9.7a-33.26.ppc",
"3AS:openssl-perl-0:0.9.7a-33.26.s390",
"3AS:openssl-perl-0:0.9.7a-33.26.s390x",
"3AS:openssl-perl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-0:0.9.7a-33.26.i686",
"3Desktop:openssl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-0:0.9.7a-33.26.src",
"3Desktop:openssl-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.i386",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-devel-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390",
"3Desktop:openssl-devel-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-devel-0:0.9.7a-33.26.x86_64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.i386",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ia64",
"3Desktop:openssl-perl-0:0.9.7a-33.26.ppc",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390",
"3Desktop:openssl-perl-0:0.9.7a-33.26.s390x",
"3Desktop:openssl-perl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-0:0.9.7a-33.26.i386",
"3ES:openssl-0:0.9.7a-33.26.i686",
"3ES:openssl-0:0.9.7a-33.26.ia64",
"3ES:openssl-0:0.9.7a-33.26.ppc",
"3ES:openssl-0:0.9.7a-33.26.ppc64",
"3ES:openssl-0:0.9.7a-33.26.s390",
"3ES:openssl-0:0.9.7a-33.26.s390x",
"3ES:openssl-0:0.9.7a-33.26.src",
"3ES:openssl-0:0.9.7a-33.26.x86_64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3ES:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3ES:openssl-devel-0:0.9.7a-33.26.i386",
"3ES:openssl-devel-0:0.9.7a-33.26.ia64",
"3ES:openssl-devel-0:0.9.7a-33.26.ppc",
"3ES:openssl-devel-0:0.9.7a-33.26.s390",
"3ES:openssl-devel-0:0.9.7a-33.26.s390x",
"3ES:openssl-devel-0:0.9.7a-33.26.x86_64",
"3ES:openssl-perl-0:0.9.7a-33.26.i386",
"3ES:openssl-perl-0:0.9.7a-33.26.ia64",
"3ES:openssl-perl-0:0.9.7a-33.26.ppc",
"3ES:openssl-perl-0:0.9.7a-33.26.s390",
"3ES:openssl-perl-0:0.9.7a-33.26.s390x",
"3ES:openssl-perl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-0:0.9.7a-33.26.i386",
"3WS:openssl-0:0.9.7a-33.26.i686",
"3WS:openssl-0:0.9.7a-33.26.ia64",
"3WS:openssl-0:0.9.7a-33.26.ppc",
"3WS:openssl-0:0.9.7a-33.26.ppc64",
"3WS:openssl-0:0.9.7a-33.26.s390",
"3WS:openssl-0:0.9.7a-33.26.s390x",
"3WS:openssl-0:0.9.7a-33.26.src",
"3WS:openssl-0:0.9.7a-33.26.x86_64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i386",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.i686",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ia64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.ppc64",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.s390x",
"3WS:openssl-debuginfo-0:0.9.7a-33.26.x86_64",
"3WS:openssl-devel-0:0.9.7a-33.26.i386",
"3WS:openssl-devel-0:0.9.7a-33.26.ia64",
"3WS:openssl-devel-0:0.9.7a-33.26.ppc",
"3WS:openssl-devel-0:0.9.7a-33.26.s390",
"3WS:openssl-devel-0:0.9.7a-33.26.s390x",
"3WS:openssl-devel-0:0.9.7a-33.26.x86_64",
"3WS:openssl-perl-0:0.9.7a-33.26.i386",
"3WS:openssl-perl-0:0.9.7a-33.26.ia64",
"3WS:openssl-perl-0:0.9.7a-33.26.ppc",
"3WS:openssl-perl-0:0.9.7a-33.26.s390",
"3WS:openssl-perl-0:0.9.7a-33.26.s390x",
"3WS:openssl-perl-0:0.9.7a-33.26.x86_64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4AS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4AS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4Desktop:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4Desktop:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4ES:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4ES:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.src",
"4WS:openssl-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.i686",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-debuginfo-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.ppc64",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-devel-0:0.9.7a-43.17.el4_8.5.x86_64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.i386",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ia64",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.ppc",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.s390x",
"4WS:openssl-perl-0:0.9.7a-43.17.el4_8.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "TLS: MITM attacks via session renegotiation"
}
]
}
RHSA-2010:0054
Vulnerability from csaf_redhat - Published: 2010-01-20 00:23 - Updated: 2025-11-21 17:35Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
Updated openssl packages that fix two security issues are now available for
Red Hat Enterprise Linux 5.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols, as well as a
full-strength, general purpose cryptography library.
It was found that the OpenSSL library did not properly re-initialize its
internal state in the SSL_library_init() function after previous calls to
the CRYPTO_cleanup_all_ex_data() function, which would cause a memory leak
for each subsequent SSL connection. This flaw could cause server
applications that call those functions during reload, such as a combination
of the Apache HTTP Server, mod_ssl, PHP, and cURL, to consume all available
memory, resulting in a denial of service. (CVE-2009-4355)
Dan Kaminsky found that browsers could accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser.
OpenSSL now disables the use of the MD2 algorithm inside signatures by
default. (CVE-2009-2409)
All OpenSSL users should upgrade to these updated packages, which contain
backported patches to resolve these issues. For the update to take effect,
all services linked to the OpenSSL library must be restarted, or the system
rebooted.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openssl packages that fix two security issues are now available for\nRed Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)\nand Transport Layer Security (TLS v1) protocols, as well as a\nfull-strength, general purpose cryptography library.\n\nIt was found that the OpenSSL library did not properly re-initialize its\ninternal state in the SSL_library_init() function after previous calls to\nthe CRYPTO_cleanup_all_ex_data() function, which would cause a memory leak\nfor each subsequent SSL connection. This flaw could cause server\napplications that call those functions during reload, such as a combination\nof the Apache HTTP Server, mod_ssl, PHP, and cURL, to consume all available\nmemory, resulting in a denial of service. (CVE-2009-4355)\n\nDan Kaminsky found that browsers could accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser.\nOpenSSL now disables the use of the MD2 algorithm inside signatures by\ndefault. (CVE-2009-2409)\n\nAll OpenSSL users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. For the update to take effect,\nall services linked to the OpenSSL library must be restarted, or the system\nrebooted.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2010:0054",
"url": "https://access.redhat.com/errata/RHSA-2010:0054"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "546707",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=546707"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0054.json"
}
],
"title": "Red Hat Security Advisory: openssl security update",
"tracking": {
"current_release_date": "2025-11-21T17:35:45+00:00",
"generator": {
"date": "2025-11-21T17:35:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2010:0054",
"initial_release_date": "2010-01-20T00:23:00+00:00",
"revision_history": [
{
"date": "2010-01-20T00:23:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2010-01-19T19:23:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:35:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"product": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"product_id": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5_4.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"product": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"product_id": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5_4.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.i386",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i386",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.src",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.src",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.i686",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i686",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"product": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"product_id": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5_4.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"product": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"product_id": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5_4.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"product": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"product_id": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5_4.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"product": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"product_id": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5_4.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-0:0.9.8e-12.el5_4.1.s390",
"product": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390",
"product_id": "openssl-0:0.9.8e-12.el5_4.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5_4.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"product": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"product_id": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5_4.1?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.src"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.src"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
},
"product_reference": "openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-01-20T00:23:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0054"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-4355",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2009-12-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "546707"
}
],
"notes": [
{
"category": "description",
"text": "Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl significant memory leak in certain SSLv3 requests (DoS)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-4355"
},
{
"category": "external",
"summary": "RHBZ#546707",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=546707"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-4355",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-4355"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-4355",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-4355"
}
],
"release_date": "2010-01-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-01-20T00:23:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0054"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client-Workstation:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client-Workstation:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-0:0.9.8e-12.el5_4.1.src",
"5Client:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Client:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-0:0.9.8e-12.el5_4.1.src",
"5Server:openssl-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.i686",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-debuginfo-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.ppc64",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-devel-0:0.9.8e-12.el5_4.1.x86_64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.i386",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ia64",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.ppc",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.s390x",
"5Server:openssl-perl-0:0.9.8e-12.el5_4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl significant memory leak in certain SSLv3 requests (DoS)"
}
]
}
RHSA-2009_1190
Vulnerability from csaf_redhat - Published: 2009-07-31 14:26 - Updated: 2024-11-22 03:00Summary
Red Hat Security Advisory: nspr and nss security and bug fix update
Notes
Topic
Updated nspr and nss packages that fix security issues and bugs are now
available for Red Hat Enterprise Linux 4.7 Extended Update Support.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities. These facilities include threads, thread
synchronization, normal file and network I/O, interval timing, calendar
time, basic memory management (malloc and free), and shared library linking.
Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications. Applications built with NSS can support SSLv2, SSLv3, TLS,
and other security standards.
These updated packages upgrade NSS from the previous version, 3.12.2, to a
prerelease of version 3.12.4. The version of NSPR has also been upgraded
from 4.7.3 to 4.7.4.
Moxie Marlinspike reported a heap overflow flaw in a regular expression
parser in the NSS library used by browsers such as Mozilla Firefox to match
common names in certificates. A malicious website could present a
carefully-crafted certificate in such a way as to trigger the heap
overflow, leading to a crash or, possibly, arbitrary code execution with
the permissions of the user running the browser. (CVE-2009-2404)
Note: in order to exploit this issue without further user interaction in
Firefox, the carefully-crafted certificate would need to be signed by a
Certificate Authority trusted by Firefox, otherwise Firefox presents the
victim with a warning that the certificate is untrusted. Only if the user
then accepts the certificate will the overflow take place.
Dan Kaminsky discovered flaws in the way browsers such as Firefox handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
Firefox, the attacker could use the certificate during a man-in-the-middle
attack and potentially confuse Firefox into accepting it by mistake.
(CVE-2009-2408)
Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
now disables the use of MD2 and MD4 algorithms inside signatures by
default. (CVE-2009-2409)
These version upgrades also provide fixes for the following bugs:
* SSL client authentication failed against an Apache server when it was
using the mod_nss module and configured for NSSOCSP. On the client side,
the user agent received an error message that referenced "Error Code:
-12271" and stated that establishing an encrypted connection had failed
because the certificate had been rejected by the host.
On the server side, the nss_error_log under /var/log/httpd/ contained the
following message:
[error] Re-negotiation handshake failed: Not accepted by client!?
Also, /var/log/httpd/error_log contained this error:
SSL Library Error: -8071 The OCSP server experienced an internal error
With these updated packages, the dependency problem which caused this
failure has been resolved so that SSL client authentication with an
Apache web server using mod_nss which is configured for NSSOCSP succeeds
as expected. Note that if the presented client certificate is expired,
then access is denied, the user agent is presented with an error message
about the invalid certificate, and the OCSP queries are seen in the OCSP
responder. Also, similar OCSP status verification happens for SSL server
certificates used in Apache upon instance start or restart. (BZ#508026)
* NSS uses a software integrity test to detect code corruption. RPM
transactions and system link optimization daemons (such as prelink) can
change the contents of libraries, causing the software integrity test to
fail. In combination with the updated prelink package (RHBA-2009:1041),
these updated packages can now prevent software integrity test failures.
(BZ#495938)
All users of nspr and nss are advised to upgrade to these updated packages,
which resolve these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated nspr and nss packages that fix security issues and bugs are now\navailable for Red Hat Enterprise Linux 4.7 Extended Update Support.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Netscape Portable Runtime (NSPR) provides platform independence for non-GUI\noperating system facilities. These facilities include threads, thread\nsynchronization, normal file and network I/O, interval timing, calendar\ntime, basic memory management (malloc and free), and shared library linking.\n\nNetwork Security Services (NSS) is a set of libraries designed to support\nthe cross-platform development of security-enabled client and server\napplications. Applications built with NSS can support SSLv2, SSLv3, TLS,\nand other security standards.\n\nThese updated packages upgrade NSS from the previous version, 3.12.2, to a\nprerelease of version 3.12.4. The version of NSPR has also been upgraded\nfrom 4.7.3 to 4.7.4.\n\nMoxie Marlinspike reported a heap overflow flaw in a regular expression\nparser in the NSS library used by browsers such as Mozilla Firefox to match\ncommon names in certificates. A malicious website could present a\ncarefully-crafted certificate in such a way as to trigger the heap\noverflow, leading to a crash or, possibly, arbitrary code execution with\nthe permissions of the user running the browser. (CVE-2009-2404)\n\nNote: in order to exploit this issue without further user interaction in\nFirefox, the carefully-crafted certificate would need to be signed by a\nCertificate Authority trusted by Firefox, otherwise Firefox presents the\nvictim with a warning that the certificate is untrusted. Only if the user\nthen accepts the certificate will the overflow take place.\n\nDan Kaminsky discovered flaws in the way browsers such as Firefox handle\nNULL characters in a certificate. If an attacker is able to get a\ncarefully-crafted certificate signed by a Certificate Authority trusted by\nFirefox, the attacker could use the certificate during a man-in-the-middle\nattack and potentially confuse Firefox into accepting it by mistake.\n(CVE-2009-2408)\n\nDan Kaminsky found that browsers still accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. NSS\nnow disables the use of MD2 and MD4 algorithms inside signatures by\ndefault. (CVE-2009-2409)\n\nThese version upgrades also provide fixes for the following bugs:\n\n* SSL client authentication failed against an Apache server when it was \nusing the mod_nss module and configured for NSSOCSP. On the client side,\nthe user agent received an error message that referenced \"Error Code:\n-12271\" and stated that establishing an encrypted connection had failed\nbecause the certificate had been rejected by the host.\n\nOn the server side, the nss_error_log under /var/log/httpd/ contained the\nfollowing message:\n\n[error] Re-negotiation handshake failed: Not accepted by client!?\n\nAlso, /var/log/httpd/error_log contained this error:\n\nSSL Library Error: -8071 The OCSP server experienced an internal error\n\nWith these updated packages, the dependency problem which caused this\nfailure has been resolved so that SSL client authentication with an\nApache web server using mod_nss which is configured for NSSOCSP succeeds\nas expected. Note that if the presented client certificate is expired,\nthen access is denied, the user agent is presented with an error message\nabout the invalid certificate, and the OCSP queries are seen in the OCSP\nresponder. Also, similar OCSP status verification happens for SSL server\ncertificates used in Apache upon instance start or restart. (BZ#508026)\n\n* NSS uses a software integrity test to detect code corruption. RPM\ntransactions and system link optimization daemons (such as prelink) can\nchange the contents of libraries, causing the software integrity test to\nfail. In combination with the updated prelink package (RHBA-2009:1041),\nthese updated packages can now prevent software integrity test failures.\n(BZ#495938)\n\nAll users of nspr and nss are advised to upgrade to these updated packages,\nwhich resolve these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1190",
"url": "https://access.redhat.com/errata/RHSA-2009:1190"
},
{
"category": "external",
"summary": "http://www.redhat.com/security/updates/classification/#critical",
"url": "http://www.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "495938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=495938"
},
{
"category": "external",
"summary": "508026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=508026"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1190.json"
}
],
"title": "Red Hat Security Advisory: nspr and nss security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T03:00:38+00:00",
"generator": {
"date": "2024-11-22T03:00:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2009:1190",
"initial_release_date": "2009-07-31T14:26:00+00:00",
"revision_history": [
{
"date": "2009-07-31T14:26:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-31T10:31:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T03:00:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product": {
"name": "Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:4.7::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product": {
"name": "Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:4.7::es"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.ia64",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.ia64",
"product_id": "nspr-0:4.7.4-1.el4_7.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.i386",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.i386",
"product_id": "nspr-0:4.7.4-1.el4_7.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.i386",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.i386",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.i386",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.i386",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.x86_64",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.x86_64",
"product_id": "nspr-0:4.7.4-1.el4_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.src",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.src",
"product_id": "nspr-0:4.7.4-1.el4_7.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=src"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.src",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.src",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.ppc",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc",
"product_id": "nspr-0:4.7.4-1.el4_7.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.ppc64",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc64",
"product_id": "nspr-0:4.7.4-1.el4_7.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.s390x",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390x",
"product_id": "nspr-0:4.7.4-1.el4_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.s390",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390",
"product_id": "nspr-0:4.7.4-1.el4_7.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ppc64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.src as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.src",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.src as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.src",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ppc64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.src as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.src",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.src as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.src",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2404",
"discovery_date": "2009-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512912"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss regexp heap overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2404"
},
{
"category": "external",
"summary": "RHBZ#512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2404"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-31T14:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "nss regexp heap overflow"
},
{
"cve": "CVE-2009-2408",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510251"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a \u0027\\0\u0027 character in a domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox/nss: doesn\u0027t handle NULL in Common Name properly",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2408"
},
{
"category": "external",
"summary": "RHBZ#510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-31T14:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox/nss: doesn\u0027t handle NULL in Common Name properly"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-31T14:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
}
]
}
RHSA-2009:1190
Vulnerability from csaf_redhat - Published: 2009-07-31 14:26 - Updated: 2025-11-21 17:34Summary
Red Hat Security Advisory: nspr and nss security and bug fix update
Notes
Topic
Updated nspr and nss packages that fix security issues and bugs are now
available for Red Hat Enterprise Linux 4.7 Extended Update Support.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities. These facilities include threads, thread
synchronization, normal file and network I/O, interval timing, calendar
time, basic memory management (malloc and free), and shared library linking.
Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications. Applications built with NSS can support SSLv2, SSLv3, TLS,
and other security standards.
These updated packages upgrade NSS from the previous version, 3.12.2, to a
prerelease of version 3.12.4. The version of NSPR has also been upgraded
from 4.7.3 to 4.7.4.
Moxie Marlinspike reported a heap overflow flaw in a regular expression
parser in the NSS library used by browsers such as Mozilla Firefox to match
common names in certificates. A malicious website could present a
carefully-crafted certificate in such a way as to trigger the heap
overflow, leading to a crash or, possibly, arbitrary code execution with
the permissions of the user running the browser. (CVE-2009-2404)
Note: in order to exploit this issue without further user interaction in
Firefox, the carefully-crafted certificate would need to be signed by a
Certificate Authority trusted by Firefox, otherwise Firefox presents the
victim with a warning that the certificate is untrusted. Only if the user
then accepts the certificate will the overflow take place.
Dan Kaminsky discovered flaws in the way browsers such as Firefox handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
Firefox, the attacker could use the certificate during a man-in-the-middle
attack and potentially confuse Firefox into accepting it by mistake.
(CVE-2009-2408)
Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
now disables the use of MD2 and MD4 algorithms inside signatures by
default. (CVE-2009-2409)
These version upgrades also provide fixes for the following bugs:
* SSL client authentication failed against an Apache server when it was
using the mod_nss module and configured for NSSOCSP. On the client side,
the user agent received an error message that referenced "Error Code:
-12271" and stated that establishing an encrypted connection had failed
because the certificate had been rejected by the host.
On the server side, the nss_error_log under /var/log/httpd/ contained the
following message:
[error] Re-negotiation handshake failed: Not accepted by client!?
Also, /var/log/httpd/error_log contained this error:
SSL Library Error: -8071 The OCSP server experienced an internal error
With these updated packages, the dependency problem which caused this
failure has been resolved so that SSL client authentication with an
Apache web server using mod_nss which is configured for NSSOCSP succeeds
as expected. Note that if the presented client certificate is expired,
then access is denied, the user agent is presented with an error message
about the invalid certificate, and the OCSP queries are seen in the OCSP
responder. Also, similar OCSP status verification happens for SSL server
certificates used in Apache upon instance start or restart. (BZ#508026)
* NSS uses a software integrity test to detect code corruption. RPM
transactions and system link optimization daemons (such as prelink) can
change the contents of libraries, causing the software integrity test to
fail. In combination with the updated prelink package (RHBA-2009:1041),
these updated packages can now prevent software integrity test failures.
(BZ#495938)
All users of nspr and nss are advised to upgrade to these updated packages,
which resolve these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated nspr and nss packages that fix security issues and bugs are now\navailable for Red Hat Enterprise Linux 4.7 Extended Update Support.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Netscape Portable Runtime (NSPR) provides platform independence for non-GUI\noperating system facilities. These facilities include threads, thread\nsynchronization, normal file and network I/O, interval timing, calendar\ntime, basic memory management (malloc and free), and shared library linking.\n\nNetwork Security Services (NSS) is a set of libraries designed to support\nthe cross-platform development of security-enabled client and server\napplications. Applications built with NSS can support SSLv2, SSLv3, TLS,\nand other security standards.\n\nThese updated packages upgrade NSS from the previous version, 3.12.2, to a\nprerelease of version 3.12.4. The version of NSPR has also been upgraded\nfrom 4.7.3 to 4.7.4.\n\nMoxie Marlinspike reported a heap overflow flaw in a regular expression\nparser in the NSS library used by browsers such as Mozilla Firefox to match\ncommon names in certificates. A malicious website could present a\ncarefully-crafted certificate in such a way as to trigger the heap\noverflow, leading to a crash or, possibly, arbitrary code execution with\nthe permissions of the user running the browser. (CVE-2009-2404)\n\nNote: in order to exploit this issue without further user interaction in\nFirefox, the carefully-crafted certificate would need to be signed by a\nCertificate Authority trusted by Firefox, otherwise Firefox presents the\nvictim with a warning that the certificate is untrusted. Only if the user\nthen accepts the certificate will the overflow take place.\n\nDan Kaminsky discovered flaws in the way browsers such as Firefox handle\nNULL characters in a certificate. If an attacker is able to get a\ncarefully-crafted certificate signed by a Certificate Authority trusted by\nFirefox, the attacker could use the certificate during a man-in-the-middle\nattack and potentially confuse Firefox into accepting it by mistake.\n(CVE-2009-2408)\n\nDan Kaminsky found that browsers still accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. NSS\nnow disables the use of MD2 and MD4 algorithms inside signatures by\ndefault. (CVE-2009-2409)\n\nThese version upgrades also provide fixes for the following bugs:\n\n* SSL client authentication failed against an Apache server when it was \nusing the mod_nss module and configured for NSSOCSP. On the client side,\nthe user agent received an error message that referenced \"Error Code:\n-12271\" and stated that establishing an encrypted connection had failed\nbecause the certificate had been rejected by the host.\n\nOn the server side, the nss_error_log under /var/log/httpd/ contained the\nfollowing message:\n\n[error] Re-negotiation handshake failed: Not accepted by client!?\n\nAlso, /var/log/httpd/error_log contained this error:\n\nSSL Library Error: -8071 The OCSP server experienced an internal error\n\nWith these updated packages, the dependency problem which caused this\nfailure has been resolved so that SSL client authentication with an\nApache web server using mod_nss which is configured for NSSOCSP succeeds\nas expected. Note that if the presented client certificate is expired,\nthen access is denied, the user agent is presented with an error message\nabout the invalid certificate, and the OCSP queries are seen in the OCSP\nresponder. Also, similar OCSP status verification happens for SSL server\ncertificates used in Apache upon instance start or restart. (BZ#508026)\n\n* NSS uses a software integrity test to detect code corruption. RPM\ntransactions and system link optimization daemons (such as prelink) can\nchange the contents of libraries, causing the software integrity test to\nfail. In combination with the updated prelink package (RHBA-2009:1041),\nthese updated packages can now prevent software integrity test failures.\n(BZ#495938)\n\nAll users of nspr and nss are advised to upgrade to these updated packages,\nwhich resolve these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1190",
"url": "https://access.redhat.com/errata/RHSA-2009:1190"
},
{
"category": "external",
"summary": "495938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=495938"
},
{
"category": "external",
"summary": "http://www.redhat.com/security/updates/classification/#critical",
"url": "http://www.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "external",
"summary": "508026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=508026"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1190.json"
}
],
"title": "Red Hat Security Advisory: nspr and nss security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T17:34:58+00:00",
"generator": {
"date": "2025-11-21T17:34:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1190",
"initial_release_date": "2009-07-31T14:26:00+00:00",
"revision_history": [
{
"date": "2009-07-31T14:26:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-31T10:31:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:34:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product": {
"name": "Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:4.7::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product": {
"name": "Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:4.7::es"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.ia64",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.ia64",
"product_id": "nspr-0:4.7.4-1.el4_7.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.i386",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.i386",
"product_id": "nspr-0:4.7.4-1.el4_7.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.i386",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.i386",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.i386",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.i386",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.x86_64",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.x86_64",
"product_id": "nspr-0:4.7.4-1.el4_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.src",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.src",
"product_id": "nspr-0:4.7.4-1.el4_7.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=src"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.src",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.src",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.ppc",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc",
"product_id": "nspr-0:4.7.4-1.el4_7.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.ppc64",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc64",
"product_id": "nspr-0:4.7.4-1.el4_7.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.s390x",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390x",
"product_id": "nspr-0:4.7.4-1.el4_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_7.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_7.1.s390",
"product": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390",
"product_id": "nspr-0:4.7.4-1.el4_7.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_7.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390",
"product_id": "nspr-devel-0:4.7.4-1.el4_7.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_7.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390",
"product_id": "nss-0:3.12.3.99.3-1.el4_7.6.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_7.6?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_7.6?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_7.6?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ppc64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.src as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.src",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.src as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.src",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.7)",
"product_id": "4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4AS-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.ppc64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.ppc64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.src as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.src",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.src as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.src",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"relates_to_product_reference": "4ES-4.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.7)",
"product_id": "4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"relates_to_product_reference": "4ES-4.7.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2404",
"discovery_date": "2009-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512912"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss regexp heap overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2404"
},
{
"category": "external",
"summary": "RHBZ#512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2404"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-31T14:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "nss regexp heap overflow"
},
{
"cve": "CVE-2009-2408",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510251"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a \u0027\\0\u0027 character in a domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox/nss: doesn\u0027t handle NULL in Common Name properly",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2408"
},
{
"category": "external",
"summary": "RHBZ#510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-31T14:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox/nss: doesn\u0027t handle NULL in Common Name properly"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-31T14:26:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1190"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4AS-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4AS-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4AS-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4AS-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.src",
"4ES-4.7.z:nspr-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.ppc64",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-debuginfo-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.i386",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ia64",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.ppc",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.s390x",
"4ES-4.7.z:nspr-devel-0:4.7.4-1.el4_7.1.x86_64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.src",
"4ES-4.7.z:nss-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.ppc64",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-debuginfo-0:3.12.3.99.3-1.el4_7.6.x86_64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.i386",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ia64",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.ppc",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.s390x",
"4ES-4.7.z:nss-devel-0:3.12.3.99.3-1.el4_7.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
}
]
}
RHSA-2009_1584
Vulnerability from csaf_redhat - Published: 2009-11-16 15:44 - Updated: 2024-11-14 10:47Summary
Red Hat Security Advisory: java-1.6.0-openjdk security update
Notes
Topic
Updated java-1.6.0-openjdk packages that fix several security issues are
now available for Red Hat Enterprise Linux 5.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
These packages provide the OpenJDK 6 Java Runtime Environment and the
OpenJDK 6 Software Development Kit. The Java Runtime Environment (JRE)
contains the software and tools that users need to run applications written
using the Java programming language.
An integer overflow flaw and buffer overflow flaws were found in the way
the JRE processed image files. An untrusted applet or application could use
these flaws to extend its privileges, allowing it to read and write local
files, as well as to execute local applications with the privileges of the
user running the applet or application. (CVE-2009-3869, CVE-2009-3871,
CVE-2009-3873, CVE-2009-3874)
An information leak was found in the JRE. An untrusted applet or
application could use this flaw to extend its privileges, allowing it to
read and write local files, as well as to execute local applications with
the privileges of the user running the applet or application. (CVE-2009-3881)
It was discovered that the JRE still accepts certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by the JRE. With
this update, the JRE disables the use of the MD2 algorithm inside
signatures by default. (CVE-2009-2409)
A timing attack flaw was found in the way the JRE processed HMAC digests.
This flaw could aid an attacker using forged digital signatures to bypass
authentication checks. (CVE-2009-3875)
Two denial of service flaws were found in the JRE. These could be exploited
in server-side application scenarios that process DER-encoded
(Distinguished Encoding Rules) data. (CVE-2009-3876, CVE-2009-3877)
An information leak was found in the way the JRE handled color profiles. An
attacker could use this flaw to discover the existence of files outside of
the color profiles directory. (CVE-2009-3728)
A flaw in the JRE with passing arrays to the X11GraphicsDevice API was
found. An untrusted applet or application could use this flaw to access and
modify the list of supported graphics configurations. This flaw could also
lead to sensitive information being leaked to unprivileged code.
(CVE-2009-3879)
It was discovered that the JRE passed entire objects to the logging API.
This could lead to sensitive information being leaked to either untrusted
or lower-privileged code from an attacker-controlled applet which has
access to the logging API and is therefore able to manipulate (read and/or
call) the passed objects. (CVE-2009-3880)
Potential information leaks were found in various mutable static variables.
These could be exploited in application scenarios that execute untrusted
scripting code. (CVE-2009-3882, CVE-2009-3883)
An information leak was found in the way the TimeZone.getTimeZone method
was handled. This method could load time zone files that are outside of the
[JRE_HOME]/lib/zi/ directory, allowing a remote attacker to probe the local
file system. (CVE-2009-3884)
Note: The flaws concerning applets in this advisory, CVE-2009-3869,
CVE-2009-3871, CVE-2009-3873, CVE-2009-3874, CVE-2009-3879, CVE-2009-3880,
CVE-2009-3881 and CVE-2009-3884, can only be triggered in
java-1.6.0-openjdk by calling the "appletviewer" application.
All users of java-1.6.0-openjdk are advised to upgrade to these updated
packages, which resolve these issues. All running instances of OpenJDK Java
must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated java-1.6.0-openjdk packages that fix several security issues are\nnow available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "These packages provide the OpenJDK 6 Java Runtime Environment and the\nOpenJDK 6 Software Development Kit. The Java Runtime Environment (JRE)\ncontains the software and tools that users need to run applications written\nusing the Java programming language.\n\nAn integer overflow flaw and buffer overflow flaws were found in the way\nthe JRE processed image files. An untrusted applet or application could use\nthese flaws to extend its privileges, allowing it to read and write local\nfiles, as well as to execute local applications with the privileges of the\nuser running the applet or application. (CVE-2009-3869, CVE-2009-3871,\nCVE-2009-3873, CVE-2009-3874)\n\nAn information leak was found in the JRE. An untrusted applet or\napplication could use this flaw to extend its privileges, allowing it to\nread and write local files, as well as to execute local applications with\nthe privileges of the user running the applet or application. (CVE-2009-3881)\n\nIt was discovered that the JRE still accepts certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by the JRE. With\nthis update, the JRE disables the use of the MD2 algorithm inside\nsignatures by default. (CVE-2009-2409)\n\nA timing attack flaw was found in the way the JRE processed HMAC digests.\nThis flaw could aid an attacker using forged digital signatures to bypass\nauthentication checks. (CVE-2009-3875)\n\nTwo denial of service flaws were found in the JRE. These could be exploited\nin server-side application scenarios that process DER-encoded\n(Distinguished Encoding Rules) data. (CVE-2009-3876, CVE-2009-3877)\n\nAn information leak was found in the way the JRE handled color profiles. An\nattacker could use this flaw to discover the existence of files outside of\nthe color profiles directory. (CVE-2009-3728)\n\nA flaw in the JRE with passing arrays to the X11GraphicsDevice API was\nfound. An untrusted applet or application could use this flaw to access and\nmodify the list of supported graphics configurations. This flaw could also\nlead to sensitive information being leaked to unprivileged code.\n(CVE-2009-3879)\n\nIt was discovered that the JRE passed entire objects to the logging API.\nThis could lead to sensitive information being leaked to either untrusted\nor lower-privileged code from an attacker-controlled applet which has\naccess to the logging API and is therefore able to manipulate (read and/or\ncall) the passed objects. (CVE-2009-3880)\n\nPotential information leaks were found in various mutable static variables.\nThese could be exploited in application scenarios that execute untrusted\nscripting code. (CVE-2009-3882, CVE-2009-3883)\n\nAn information leak was found in the way the TimeZone.getTimeZone method\nwas handled. This method could load time zone files that are outside of the\n[JRE_HOME]/lib/zi/ directory, allowing a remote attacker to probe the local\nfile system. (CVE-2009-3884)\n\nNote: The flaws concerning applets in this advisory, CVE-2009-3869,\nCVE-2009-3871, CVE-2009-3873, CVE-2009-3874, CVE-2009-3879, CVE-2009-3880,\nCVE-2009-3881 and CVE-2009-3884, can only be triggered in\njava-1.6.0-openjdk by calling the \"appletviewer\" application.\n\nAll users of java-1.6.0-openjdk are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK Java\nmust be restarted for the update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1584",
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6",
"url": "http://blogs.sun.com/security/entry/advance_notification_of_security_updates6"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "530057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530057"
},
{
"category": "external",
"summary": "530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "530062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530062"
},
{
"category": "external",
"summary": "530063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530063"
},
{
"category": "external",
"summary": "530067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530067"
},
{
"category": "external",
"summary": "530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1584.json"
}
],
"title": "Red Hat Security Advisory: java-1.6.0-openjdk security update",
"tracking": {
"current_release_date": "2024-11-14T10:47:12+00:00",
"generator": {
"date": "2024-11-14T10:47:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2009:1584",
"initial_release_date": "2009-11-16T15:44:00+00:00",
"revision_history": [
{
"date": "2009-11-16T15:44:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-11-16T10:44:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T10:47:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"product": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.7.b09.el5?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"product": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.7.b09.el5?arch=i386\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"product": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.7.b09.el5?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386"
},
"product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
},
"product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-3728",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530098"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ICC_Profile file existence detection information leak (6631533)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3728"
},
{
"category": "external",
"summary": "RHBZ#530098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530098"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3728",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3728"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK ICC_Profile file existence detection information leak (6631533)"
},
{
"cve": "CVE-2009-3869",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530062"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3869"
},
{
"category": "external",
"summary": "RHBZ#530062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3869",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3869"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setDifflCM stack overflow (6872357)"
},
{
"cve": "CVE-2009-3871",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530063"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3871"
},
{
"category": "external",
"summary": "RHBZ#530063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530063"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3871",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3871"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JRE AWT setBytePixels heap overflow (6872358)"
},
{
"cve": "CVE-2009-3873",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530053"
}
],
"notes": [
{
"category": "description",
"text": "The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK JPEG Image Writer quantization problem (6862968)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3873"
},
{
"category": "external",
"summary": "RHBZ#530053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3873",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3873"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK JPEG Image Writer quantization problem (6862968)"
},
{
"cve": "CVE-2009-3874",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530067"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ImageI/O JPEG heap overflow (6874643)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3874"
},
{
"category": "external",
"summary": "RHBZ#530067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530067"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3874",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3874"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK ImageI/O JPEG heap overflow (6874643)"
},
{
"cve": "CVE-2009-3875",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530057"
}
],
"notes": [
{
"category": "description",
"text": "The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to \"timing attack vulnerabilities,\" aka Bug Id 6863503.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3875"
},
{
"category": "external",
"summary": "RHBZ#530057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530057"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3875",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3875"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3875"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)"
},
{
"cve": "CVE-2009-3876",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3876"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3876",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3876"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3877",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530061"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3877"
},
{
"category": "external",
"summary": "RHBZ#530061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3877",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3877"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877"
},
{
"cve": "CVE-2009-3879",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530297"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK GraphicsConfiguration information leak(6822057)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3879"
},
{
"category": "external",
"summary": "RHBZ#530297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3879",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3879"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK GraphicsConfiguration information leak(6822057)"
},
{
"cve": "CVE-2009-3880",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530296"
}
],
"notes": [
{
"category": "description",
"text": "The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK UI logging information leakage(6664512)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3880"
},
{
"category": "external",
"summary": "RHBZ#530296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3880",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3880"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3880"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK UI logging information leakage(6664512)"
},
{
"cve": "CVE-2009-3881",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530173"
}
],
"notes": [
{
"category": "description",
"text": "Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an \"information leak vulnerability,\" aka Bug Id 6636650.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK resurrected classloaders can still have children (6636650)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3881"
},
{
"category": "external",
"summary": "RHBZ#530173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530173"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3881",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3881"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK resurrected classloaders can still have children (6636650)"
},
{
"cve": "CVE-2009-3882",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657026.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3882"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3882",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3882"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3882"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3883",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530175"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL\u0026F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657138.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK information leaks in mutable variables (6657026,6657138)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3883"
},
{
"category": "external",
"summary": "RHBZ#530175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3883",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3883"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK information leaks in mutable variables (6657026,6657138)"
},
{
"cve": "CVE-2009-3884",
"discovery_date": "2009-10-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "530300"
}
],
"notes": [
{
"category": "description",
"text": "The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK zoneinfo file existence information leak (6824265)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3884"
},
{
"category": "external",
"summary": "RHBZ#530300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=530300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3884",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3884"
}
],
"release_date": "2009-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-11-16T15:44:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1584"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Client:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.src",
"5Server:java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.7.b09.el5.x86_64",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.i386",
"5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.7.b09.el5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK zoneinfo file existence information leak (6824265)"
}
]
}
RHSA-2009:1432
Vulnerability from csaf_redhat - Published: 2009-09-09 23:48 - Updated: 2025-11-21 17:35Summary
Red Hat Security Advisory: seamonkey security update
Notes
Topic
Updated seamonkey packages that fix several security issues are now
available for Red Hat Enterprise Linux 3.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.
Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2009-3072, CVE-2009-3075)
A use-after-free flaw was found in SeaMonkey. An attacker could use this
flaw to crash SeaMonkey or, potentially, execute arbitrary code with the
privileges of the user running SeaMonkey. (CVE-2009-3077)
Dan Kaminsky discovered flaws in the way browsers such as SeaMonkey handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
SeaMonkey, the attacker could use the certificate during a
man-in-the-middle attack and potentially confuse SeaMonkey into accepting
it by mistake. (CVE-2009-2408)
Descriptions in the dialogs when adding and removing PKCS #11 modules were
not informative. An attacker able to trick a user into installing a
malicious PKCS #11 module could use this flaw to install their own
Certificate Authority certificates on a user's machine, making it possible
to trick the user into believing they are viewing a trusted site or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2009-3076)
A flaw was found in the way SeaMonkey displays the address bar when
window.open() is called in a certain way. An attacker could use this flaw
to conceal a malicious URL, possibly tricking a user into believing they
are viewing a trusted site. (CVE-2009-2654)
Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
(provided by SeaMonkey) now disables the use of MD2 and MD4 algorithms
inside signatures by default. (CVE-2009-2409)
All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated seamonkey packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 3.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "SeaMonkey is an open source Web browser, email and newsgroup client, IRC\nchat client, and HTML editor.\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause SeaMonkey to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2009-3072, CVE-2009-3075)\n\nA use-after-free flaw was found in SeaMonkey. An attacker could use this\nflaw to crash SeaMonkey or, potentially, execute arbitrary code with the\nprivileges of the user running SeaMonkey. (CVE-2009-3077)\n\nDan Kaminsky discovered flaws in the way browsers such as SeaMonkey handle\nNULL characters in a certificate. If an attacker is able to get a\ncarefully-crafted certificate signed by a Certificate Authority trusted by\nSeaMonkey, the attacker could use the certificate during a\nman-in-the-middle attack and potentially confuse SeaMonkey into accepting\nit by mistake. (CVE-2009-2408)\n\nDescriptions in the dialogs when adding and removing PKCS #11 modules were\nnot informative. An attacker able to trick a user into installing a\nmalicious PKCS #11 module could use this flaw to install their own\nCertificate Authority certificates on a user\u0027s machine, making it possible\nto trick the user into believing they are viewing a trusted site or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2009-3076)\n\nA flaw was found in the way SeaMonkey displays the address bar when\nwindow.open() is called in a certain way. An attacker could use this flaw\nto conceal a malicious URL, possibly tricking a user into believing they\nare viewing a trusted site. (CVE-2009-2654)\n\nDan Kaminsky found that browsers still accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. NSS\n(provided by SeaMonkey) now disables the use of MD2 and MD4 algorithms\ninside signatures by default. (CVE-2009-2409)\n\nAll SeaMonkey users should upgrade to these updated packages, which correct\nthese issues. After installing the update, SeaMonkey must be restarted for\nthe changes to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1432",
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "521311",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521311"
},
{
"category": "external",
"summary": "521688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521688"
},
{
"category": "external",
"summary": "521691",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521691"
},
{
"category": "external",
"summary": "521692",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521692"
},
{
"category": "external",
"summary": "521693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521693"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1432.json"
}
],
"title": "Red Hat Security Advisory: seamonkey security update",
"tracking": {
"current_release_date": "2025-11-21T17:35:11+00:00",
"generator": {
"date": "2025-11-21T17:35:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1432",
"initial_release_date": "2009-09-09T23:48:00+00:00",
"revision_history": [
{
"date": "2009-09-09T23:48:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-09-09T19:50:33+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:35:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.src",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.src",
"product_id": "seamonkey-0:1.0.9-0.45.el3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-debuginfo@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nss-devel@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-mail@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-nspr-devel@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-chat@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-dom-inspector@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-devel@1.0.9-0.45.el3?arch=s390"
}
}
},
{
"category": "product_version",
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"product": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"product_id": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/seamonkey-js-debugger@1.0.9-0.45.el3?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.src"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.src"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.src"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.src"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
},
"product_reference": "seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"relates_to_product_reference": "3WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2408",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510251"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a \u0027\\0\u0027 character in a domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox/nss: doesn\u0027t handle NULL in Common Name properly",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2408"
},
{
"category": "external",
"summary": "RHBZ#510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox/nss: doesn\u0027t handle NULL in Common Name properly"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
},
{
"cve": "CVE-2009-2654",
"discovery_date": "2009-08-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "521311"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: URL bar spoofing vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2654"
},
{
"category": "external",
"summary": "RHBZ#521311",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521311"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2654",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2654"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2654",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2654"
}
],
"release_date": "2009-07-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: URL bar spoofing vulnerability"
},
{
"cve": "CVE-2009-3072",
"discovery_date": "2009-09-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "521688"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Firefox 3.5.3 3.0.14 browser engine crashes",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3072"
},
{
"category": "external",
"summary": "RHBZ#521688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3072",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3072"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3072",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3072"
}
],
"release_date": "2009-09-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Firefox 3.5.3 3.0.14 browser engine crashes"
},
{
"cve": "CVE-2009-3075",
"discovery_date": "2009-09-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "521691"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Firefox 3.5.2 3.0.14 JavaScript engine crashes",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3075"
},
{
"category": "external",
"summary": "RHBZ#521691",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521691"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3075",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3075"
}
],
"release_date": "2009-09-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Firefox 3.5.2 3.0.14 JavaScript engine crashes"
},
{
"cve": "CVE-2009-3076",
"discovery_date": "2009-09-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "521692"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3076"
},
{
"category": "external",
"summary": "RHBZ#521692",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521692"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3076",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3076"
}
],
"release_date": "2009-09-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal"
},
{
"cve": "CVE-2009-3077",
"discovery_date": "2009-09-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "521693"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a \"dangling pointer vulnerability.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-3077"
},
{
"category": "external",
"summary": "RHBZ#521693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=521693"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-3077",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-3077"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3077",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3077"
}
],
"release_date": "2009-09-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-09-09T23:48:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1432"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS:seamonkey-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-0:1.0.9-0.45.el3.src",
"3AS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3AS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.src",
"3Desktop:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3Desktop:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-0:1.0.9-0.45.el3.src",
"3ES:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3ES:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-0:1.0.9-0.45.el3.src",
"3WS:seamonkey-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-chat-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-debuginfo-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-dom-inspector-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-js-debugger-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-mail-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nspr-devel-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-0:1.0.9-0.45.el3.x86_64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.i386",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ia64",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.ppc",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.s390x",
"3WS:seamonkey-nss-devel-0:1.0.9-0.45.el3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability"
}
]
}
RHSA-2009:1184
Vulnerability from csaf_redhat - Published: 2009-07-30 22:09 - Updated: 2025-11-21 17:34Summary
Red Hat Security Advisory: nspr and nss security and bug fix update
Notes
Topic
Updated nspr and nss packages that fix security issues and a bug are now
available for Red Hat Enterprise Linux 4.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities. These facilities include threads, thread
synchronization, normal file and network I/O, interval timing, calendar
time, basic memory management (malloc and free), and shared library linking.
Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications. Applications built with NSS can support SSLv2, SSLv3, TLS,
and other security standards.
These updated packages upgrade NSS from the previous version, 3.12.2, to a
prerelease of version 3.12.4. The version of NSPR has also been upgraded
from 4.7.3 to 4.7.4.
Moxie Marlinspike reported a heap overflow flaw in a regular expression
parser in the NSS library used by browsers such as Mozilla Firefox to match
common names in certificates. A malicious website could present a
carefully-crafted certificate in such a way as to trigger the heap
overflow, leading to a crash or, possibly, arbitrary code execution with
the permissions of the user running the browser. (CVE-2009-2404)
Note: in order to exploit this issue without further user interaction in
Firefox, the carefully-crafted certificate would need to be signed by a
Certificate Authority trusted by Firefox, otherwise Firefox presents the
victim with a warning that the certificate is untrusted. Only if the user
then accepts the certificate will the overflow take place.
Dan Kaminsky discovered flaws in the way browsers such as Firefox handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
Firefox, the attacker could use the certificate during a man-in-the-middle
attack and potentially confuse Firefox into accepting it by mistake.
(CVE-2009-2408)
Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
now disables the use of MD2 and MD4 algorithms inside signatures by
default. (CVE-2009-2409)
These version upgrades also provide a fix for the following bug:
* SSL client authentication failed against an Apache server when it was
using the mod_nss module and configured for NSSOCSP. On the client side,
the user agent received an error message that referenced "Error Code:
-12271" and stated that establishing an encrypted connection had failed
because the certificate had been rejected by the host.
On the server side, the nss_error_log under /var/log/httpd/ contained the
following message:
[error] Re-negotiation handshake failed: Not accepted by client!?
Also, /var/log/httpd/error_log contained this error:
SSL Library Error: -8071 The OCSP server experienced an internal error
With these updated packages, the dependency problem which caused this
failure has been resolved so that SSL client authentication with an
Apache web server using mod_nss which is configured for NSSOCSP succeeds
as expected. Note that if the presented client certificate is expired,
then access is denied, the user agent is presented with an error message
about the invalid certificate, and the OCSP queries are seen in the OCSP
responder. Also, similar OCSP status verification happens for SSL server
certificates used in Apache upon instance start or restart. (BZ#508027)
All users of nspr and nss are advised to upgrade to these updated packages,
which resolve these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated nspr and nss packages that fix security issues and a bug are now\navailable for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Netscape Portable Runtime (NSPR) provides platform independence for non-GUI\noperating system facilities. These facilities include threads, thread\nsynchronization, normal file and network I/O, interval timing, calendar\ntime, basic memory management (malloc and free), and shared library linking.\n\nNetwork Security Services (NSS) is a set of libraries designed to support\nthe cross-platform development of security-enabled client and server\napplications. Applications built with NSS can support SSLv2, SSLv3, TLS,\nand other security standards.\n\nThese updated packages upgrade NSS from the previous version, 3.12.2, to a\nprerelease of version 3.12.4. The version of NSPR has also been upgraded\nfrom 4.7.3 to 4.7.4. \n\nMoxie Marlinspike reported a heap overflow flaw in a regular expression\nparser in the NSS library used by browsers such as Mozilla Firefox to match\ncommon names in certificates. A malicious website could present a\ncarefully-crafted certificate in such a way as to trigger the heap\noverflow, leading to a crash or, possibly, arbitrary code execution with\nthe permissions of the user running the browser. (CVE-2009-2404)\n\nNote: in order to exploit this issue without further user interaction in\nFirefox, the carefully-crafted certificate would need to be signed by a\nCertificate Authority trusted by Firefox, otherwise Firefox presents the\nvictim with a warning that the certificate is untrusted. Only if the user\nthen accepts the certificate will the overflow take place.\n\nDan Kaminsky discovered flaws in the way browsers such as Firefox handle\nNULL characters in a certificate. If an attacker is able to get a\ncarefully-crafted certificate signed by a Certificate Authority trusted by\nFirefox, the attacker could use the certificate during a man-in-the-middle\nattack and potentially confuse Firefox into accepting it by mistake.\n(CVE-2009-2408)\n\nDan Kaminsky found that browsers still accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. NSS\nnow disables the use of MD2 and MD4 algorithms inside signatures by\ndefault. (CVE-2009-2409)\n\nThese version upgrades also provide a fix for the following bug:\n\n* SSL client authentication failed against an Apache server when it was \nusing the mod_nss module and configured for NSSOCSP. On the client side,\nthe user agent received an error message that referenced \"Error Code:\n-12271\" and stated that establishing an encrypted connection had failed\nbecause the certificate had been rejected by the host.\n\nOn the server side, the nss_error_log under /var/log/httpd/ contained the\nfollowing message:\n\n[error] Re-negotiation handshake failed: Not accepted by client!?\n\nAlso, /var/log/httpd/error_log contained this error:\n\nSSL Library Error: -8071 The OCSP server experienced an internal error\n\nWith these updated packages, the dependency problem which caused this\nfailure has been resolved so that SSL client authentication with an\nApache web server using mod_nss which is configured for NSSOCSP succeeds\nas expected. Note that if the presented client certificate is expired,\nthen access is denied, the user agent is presented with an error message\nabout the invalid certificate, and the OCSP queries are seen in the OCSP\nresponder. Also, similar OCSP status verification happens for SSL server\ncertificates used in Apache upon instance start or restart. (BZ#508027)\n\nAll users of nspr and nss are advised to upgrade to these updated packages,\nwhich resolve these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1184",
"url": "https://access.redhat.com/errata/RHSA-2009:1184"
},
{
"category": "external",
"summary": "http://www.redhat.com/security/updates/classification/#critical",
"url": "http://www.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "508027",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=508027"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1184.json"
}
],
"title": "Red Hat Security Advisory: nspr and nss security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T17:34:57+00:00",
"generator": {
"date": "2025-11-21T17:34:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1184",
"initial_release_date": "2009-07-30T22:09:00+00:00",
"revision_history": [
{
"date": "2009-07-30T22:09:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-30T18:09:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:34:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.ia64",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.ia64",
"product_id": "nspr-0:4.7.4-1.el4_8.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.i386",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.i386",
"product_id": "nspr-0:4.7.4-1.el4_8.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"product_id": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.src",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.src",
"product_id": "nspr-0:4.7.4-1.el4_8.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.ppc",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc",
"product_id": "nspr-0:4.7.4-1.el4_8.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"product_id": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.s390x",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390x",
"product_id": "nspr-0:4.7.4-1.el4_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"product": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"product_id": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"product_id": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"product_id": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"product_id": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el4_8.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el4_8.1.s390",
"product": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390",
"product_id": "nspr-0:4.7.4-1.el4_8.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el4_8.1?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"product": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"product_id": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el4_8.1?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.src"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2404",
"discovery_date": "2009-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512912"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss regexp heap overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2404"
},
{
"category": "external",
"summary": "RHBZ#512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2404"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:09:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1184"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "nss regexp heap overflow"
},
{
"cve": "CVE-2009-2408",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510251"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a \u0027\\0\u0027 character in a domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox/nss: doesn\u0027t handle NULL in Common Name properly",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2408"
},
{
"category": "external",
"summary": "RHBZ#510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:09:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1184"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox/nss: doesn\u0027t handle NULL in Common Name properly"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-30T22:09:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1184"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS:nspr-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-0:4.7.4-1.el4_8.1.src",
"4AS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4AS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4AS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4AS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.src",
"4Desktop:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4Desktop:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4Desktop:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4Desktop:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nspr-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-0:4.7.4-1.el4_8.1.src",
"4ES:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4ES:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4ES:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4ES:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nspr-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-0:4.7.4-1.el4_8.1.src",
"4WS:nspr-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.ppc64",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-debuginfo-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.i386",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ia64",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.ppc",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.s390x",
"4WS:nspr-devel-0:4.7.4-1.el4_8.1.x86_64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.src",
"4WS:nss-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.ppc64",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-debuginfo-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-devel-0:3.12.3.99.3-1.el4_8.2.x86_64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.i386",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ia64",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.ppc",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.s390x",
"4WS:nss-tools-0:3.12.3.99.3-1.el4_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
}
]
}
RHSA-2009:1207
Vulnerability from csaf_redhat - Published: 2009-08-12 14:31 - Updated: 2025-11-21 17:35Summary
Red Hat Security Advisory: nspr and nss security update
Notes
Topic
Updated nspr and nss packages that fix security issues are now available
for Red Hat Enterprise Linux 5.2 Extended Update Support.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities. These facilities include threads, thread
synchronization, normal file and network I/O, interval timing, calendar
time, basic memory management (malloc and free), and shared library linking.
Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications. Applications built with NSS can support SSLv2, SSLv3, TLS,
and other security standards.
These updated packages upgrade NSS from the previous version, 3.12.2, to a
prerelease of version 3.12.4. The version of NSPR has also been upgraded
from 4.7.3 to 4.7.4.
Moxie Marlinspike reported a heap overflow flaw in a regular expression
parser in the NSS library used by browsers such as Mozilla Firefox to match
common names in certificates. A malicious website could present a
carefully-crafted certificate in such a way as to trigger the heap
overflow, leading to a crash or, possibly, arbitrary code execution with
the permissions of the user running the browser. (CVE-2009-2404)
Note: in order to exploit this issue without further user interaction in
Firefox, the carefully-crafted certificate would need to be signed by a
Certificate Authority trusted by Firefox, otherwise Firefox presents the
victim with a warning that the certificate is untrusted. Only if the user
then accepts the certificate will the overflow take place.
Dan Kaminsky discovered flaws in the way browsers such as Firefox handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
Firefox, the attacker could use the certificate during a man-in-the-middle
attack and potentially confuse Firefox into accepting it by mistake.
(CVE-2009-2408)
Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
now disables the use of MD2 and MD4 algorithms inside signatures by
default. (CVE-2009-2409)
All users of nspr and nss are advised to upgrade to these updated packages,
which resolve these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated nspr and nss packages that fix security issues are now available\nfor Red Hat Enterprise Linux 5.2 Extended Update Support.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Netscape Portable Runtime (NSPR) provides platform independence for non-GUI\noperating system facilities. These facilities include threads, thread\nsynchronization, normal file and network I/O, interval timing, calendar\ntime, basic memory management (malloc and free), and shared library linking.\n\nNetwork Security Services (NSS) is a set of libraries designed to support\nthe cross-platform development of security-enabled client and server\napplications. Applications built with NSS can support SSLv2, SSLv3, TLS,\nand other security standards.\n\nThese updated packages upgrade NSS from the previous version, 3.12.2, to a\nprerelease of version 3.12.4. The version of NSPR has also been upgraded\nfrom 4.7.3 to 4.7.4.\n\nMoxie Marlinspike reported a heap overflow flaw in a regular expression\nparser in the NSS library used by browsers such as Mozilla Firefox to match\ncommon names in certificates. A malicious website could present a\ncarefully-crafted certificate in such a way as to trigger the heap\noverflow, leading to a crash or, possibly, arbitrary code execution with\nthe permissions of the user running the browser. (CVE-2009-2404)\n\nNote: in order to exploit this issue without further user interaction in\nFirefox, the carefully-crafted certificate would need to be signed by a\nCertificate Authority trusted by Firefox, otherwise Firefox presents the\nvictim with a warning that the certificate is untrusted. Only if the user\nthen accepts the certificate will the overflow take place.\n\nDan Kaminsky discovered flaws in the way browsers such as Firefox handle\nNULL characters in a certificate. If an attacker is able to get a\ncarefully-crafted certificate signed by a Certificate Authority trusted by\nFirefox, the attacker could use the certificate during a man-in-the-middle\nattack and potentially confuse Firefox into accepting it by mistake.\n(CVE-2009-2408)\n\nDan Kaminsky found that browsers still accept certificates with MD2 hash\nsignatures, even though MD2 is no longer considered a cryptographically\nstrong algorithm. This could make it easier for an attacker to create a\nmalicious certificate that would be treated as trusted by a browser. NSS\nnow disables the use of MD2 and MD4 algorithms inside signatures by\ndefault. (CVE-2009-2409)\n\nAll users of nspr and nss are advised to upgrade to these updated packages,\nwhich resolve these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1207",
"url": "https://access.redhat.com/errata/RHSA-2009:1207"
},
{
"category": "external",
"summary": "http://www.redhat.com/security/updates/classification/#critical",
"url": "http://www.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1207.json"
}
],
"title": "Red Hat Security Advisory: nspr and nss security update",
"tracking": {
"current_release_date": "2025-11-21T17:35:02+00:00",
"generator": {
"date": "2025-11-21T17:35:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1207",
"initial_release_date": "2009-08-12T14:31:00+00:00",
"revision_history": [
{
"date": "2009-08-12T14:31:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-08-12T10:31:10+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:35:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product": {
"name": "Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:5.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.ia64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ia64",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.ia64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ia64",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.ia64",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.ia64",
"product_id": "nspr-0:4.7.4-1.el5_2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.i386",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.i386",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.i386",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.i386",
"product_id": "nspr-0:4.7.4-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.i386",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.i386",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc64",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc64",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.ppc64",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.ppc64",
"product_id": "nspr-0:4.7.4-1.el5_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.ppc",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.ppc",
"product_id": "nspr-0:4.7.4-1.el5_2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.src",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.src",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=src"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.src",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.src",
"product_id": "nspr-0:4.7.4-1.el5_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.s390x",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.s390x",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.s390x",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.s390x",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.s390x",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.s390x",
"product_id": "nspr-0:4.7.4-1.el5_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.s390",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.s390",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.s390",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.s390",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.s390",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.s390",
"product_id": "nspr-0:4.7.4-1.el5_2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.12.3.99.3-1.el5_2.x86_64",
"product": {
"name": "nss-0:3.12.3.99.3-1.el5_2.x86_64",
"product_id": "nss-0:3.12.3.99.3-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.12.3.99.3-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.x86_64",
"product": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.x86_64",
"product_id": "nss-tools-0:3.12.3.99.3-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.12.3.99.3-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product_id": "nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.12.3.99.3-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"product": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"product_id": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.12.3.99.3-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product_id": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.12.3.99.3-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.7.4-1.el5_2.x86_64",
"product": {
"name": "nspr-devel-0:4.7.4-1.el5_2.x86_64",
"product_id": "nspr-devel-0:4.7.4-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.7.4-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"product": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"product_id": "nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.7.4-1.el5_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.7.4-1.el5_2.x86_64",
"product": {
"name": "nspr-0:4.7.4-1.el5_2.x86_64",
"product_id": "nspr-0:4.7.4-1.el5_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.7.4-1.el5_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.src as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.src",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.7.4-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64"
},
"product_reference": "nspr-0:4.7.4-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.7.4-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.7.4-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64"
},
"product_reference": "nspr-devel-0:4.7.4-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.src as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.src",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.12.3.99.3-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64"
},
"product_reference": "nss-0:3.12.3.99.3-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64"
},
"product_reference": "nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.12.3.99.3-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64"
},
"product_reference": "nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64"
},
"product_reference": "nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"relates_to_product_reference": "5Server-5.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.12.3.99.3-1.el5_2.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.2 server)",
"product_id": "5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
},
"product_reference": "nss-tools-0:3.12.3.99.3-1.el5_2.x86_64",
"relates_to_product_reference": "5Server-5.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-2404",
"discovery_date": "2009-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "512912"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss regexp heap overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2404"
},
{
"category": "external",
"summary": "RHBZ#512912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=512912"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2404"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2404"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-08-12T14:31:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1207"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "nss regexp heap overflow"
},
{
"cve": "CVE-2009-2408",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510251"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a \u0027\\0\u0027 character in a domain name in the subject\u0027s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox/nss: doesn\u0027t handle NULL in Common Name properly",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2408"
},
{
"category": "external",
"summary": "RHBZ#510251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2408"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-08-12T14:31:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1207"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox/nss: doesn\u0027t handle NULL in Common Name properly"
},
{
"cve": "CVE-2009-2409",
"discovery_date": "2009-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "510197"
}
],
"notes": [
{
"category": "description",
"text": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "deprecate MD2 in SSL cert validation (Kaminsky)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2409"
},
{
"category": "external",
"summary": "RHBZ#510197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=510197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2409"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
}
],
"release_date": "2009-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-08-12T14:31:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1207"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.src",
"5Server-5.2.Z:nspr-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-debuginfo-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.i386",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ia64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.ppc64",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.s390x",
"5Server-5.2.Z:nspr-devel-0:4.7.4-1.el5_2.x86_64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.src",
"5Server-5.2.Z:nss-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-debuginfo-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.ppc64",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-pkcs11-devel-0:3.12.3.99.3-1.el5_2.x86_64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.i386",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ia64",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.ppc",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.s390x",
"5Server-5.2.Z:nss-tools-0:3.12.3.99.3-1.el5_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "deprecate MD2 in SSL cert validation (Kaminsky)"
}
]
}
GHSA-C2F9-W3C5-X385
Vulnerability from github – Published: 2022-05-02 03:35 – Updated: 2025-03-27 15:30
VLAI?
Details
The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
{
"affected": [],
"aliases": [
"CVE-2009-2409"
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2009-07-30T19:30:00Z",
"severity": "MODERATE"
},
"details": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"id": "GHSA-c2f9-w3c5-x385",
"modified": "2025-03-27T15:30:34Z",
"published": "2022-05-02T03:35:02Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2409"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409"
},
{
"type": "WEB",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
},
{
"type": "WEB",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594"
},
{
"type": "WEB",
"url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/810-2"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2009/dsa-1888"
},
{
"type": "WEB",
"url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html"
},
{
"type": "WEB",
"url": "http://java.sun.com/javase/6/webnotes/6u17.html"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/36139"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/36157"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/36434"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/36669"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/36739"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/37386"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/42467"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
},
{
"type": "WEB",
"url": "http://support.apple.com/kb/HT3937"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2009/dsa-1874"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:258"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1207.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/515055/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1022631"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/usn-810-1"
},
{
"type": "WEB",
"url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2009/2085"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2009/3184"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2010/3126"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2009-2409
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2009-2409",
"description": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"id": "GSD-2009-2409",
"references": [
"https://www.suse.com/security/cve/CVE-2009-2409.html",
"https://www.debian.org/security/2009/dsa-1935",
"https://www.debian.org/security/2009/dsa-1888",
"https://www.debian.org/security/2009/dsa-1874",
"https://access.redhat.com/errata/RHSA-2010:0166",
"https://access.redhat.com/errata/RHSA-2010:0163",
"https://access.redhat.com/errata/RHSA-2010:0054",
"https://access.redhat.com/errata/RHSA-2009:1662",
"https://access.redhat.com/errata/RHSA-2009:1584",
"https://access.redhat.com/errata/RHSA-2009:1571",
"https://access.redhat.com/errata/RHSA-2009:1560",
"https://access.redhat.com/errata/RHSA-2009:1432",
"https://access.redhat.com/errata/RHSA-2009:1207",
"https://access.redhat.com/errata/RHSA-2009:1190",
"https://access.redhat.com/errata/RHSA-2009:1186",
"https://access.redhat.com/errata/RHSA-2009:1184",
"https://linux.oracle.com/cve/CVE-2009-2409.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2009-2409"
],
"details": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.",
"id": "GSD-2009-2409",
"modified": "2023-12-13T01:19:46.919562Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2009-2409",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://security.gentoo.org/glsa/glsa-200912-01.xml",
"refsource": "MISC",
"url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
},
{
"name": "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
"refsource": "MISC",
"url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html"
},
{
"name": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
"refsource": "MISC",
"url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html"
},
{
"name": "http://java.sun.com/javase/6/webnotes/6u17.html",
"refsource": "MISC",
"url": "http://java.sun.com/javase/6/webnotes/6u17.html"
},
{
"name": "http://secunia.com/advisories/37386",
"refsource": "MISC",
"url": "http://secunia.com/advisories/37386"
},
{
"name": "http://security.gentoo.org/glsa/glsa-200911-02.xml",
"refsource": "MISC",
"url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
},
{
"name": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
"refsource": "MISC",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084"
},
{
"name": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
"refsource": "MISC",
"url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html"
},
{
"name": "http://support.apple.com/kb/HT3937",
"refsource": "MISC",
"url": "http://support.apple.com/kb/HT3937"
},
{
"name": "http://www.vupen.com/english/advisories/2009/3184",
"refsource": "MISC",
"url": "http://www.vupen.com/english/advisories/2009/3184"
},
{
"name": "http://www.securityfocus.com/archive/1/515055/100/0/threaded",
"refsource": "MISC",
"url": "http://www.securityfocus.com/archive/1/515055/100/0/threaded"
},
{
"name": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html",
"refsource": "MISC",
"url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
},
{
"name": "http://www.vupen.com/english/advisories/2010/3126",
"refsource": "MISC",
"url": "http://www.vupen.com/english/advisories/2010/3126"
},
{
"name": "http://secunia.com/advisories/36139",
"refsource": "MISC",
"url": "http://secunia.com/advisories/36139"
},
{
"name": "http://secunia.com/advisories/36157",
"refsource": "MISC",
"url": "http://secunia.com/advisories/36157"
},
{
"name": "http://secunia.com/advisories/36434",
"refsource": "MISC",
"url": "http://secunia.com/advisories/36434"
},
{
"name": "http://www.debian.org/security/2009/dsa-1874",
"refsource": "MISC",
"url": "http://www.debian.org/security/2009/dsa-1874"
},
{
"name": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197",
"refsource": "MISC",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197"
},
{
"name": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
"refsource": "MISC",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216"
},
{
"name": "http://www.redhat.com/support/errata/RHSA-2009-1207.html",
"refsource": "MISC",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1207.html"
},
{
"name": "http://www.ubuntu.com/usn/usn-810-1",
"refsource": "MISC",
"url": "http://www.ubuntu.com/usn/usn-810-1"
},
{
"name": "http://www.vupen.com/english/advisories/2009/2085",
"refsource": "MISC",
"url": "http://www.vupen.com/english/advisories/2009/2085"
},
{
"name": "https://usn.ubuntu.com/810-2/",
"refsource": "MISC",
"url": "https://usn.ubuntu.com/810-2/"
},
{
"name": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html",
"refsource": "MISC",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
},
{
"name": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html",
"refsource": "MISC",
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
},
{
"name": "http://secunia.com/advisories/42467",
"refsource": "MISC",
"url": "http://secunia.com/advisories/42467"
},
{
"name": "http://secunia.com/advisories/36669",
"refsource": "MISC",
"url": "http://secunia.com/advisories/36669"
},
{
"name": "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
"refsource": "MISC",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
},
{
"name": "http://secunia.com/advisories/36739",
"refsource": "MISC",
"url": "http://secunia.com/advisories/36739"
},
{
"name": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:258",
"refsource": "MISC",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:258"
},
{
"name": "http://www.securitytracker.com/id?1022631",
"refsource": "MISC",
"url": "http://www.securitytracker.com/id?1022631"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409"
},
{
"name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763",
"refsource": "MISC",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763"
},
{
"name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631",
"refsource": "MISC",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631"
},
{
"name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155",
"refsource": "MISC",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155"
},
{
"name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594",
"refsource": "MISC",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594"
},
{
"name": "https://www.debian.org/security/2009/dsa-1888",
"refsource": "MISC",
"url": "https://www.debian.org/security/2009/dsa-1888"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "3.12.2",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.4.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.4.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.4.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.6.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.7.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.7.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.7.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.9.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.11.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.11.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.11.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.11.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:nss:3.12.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.5.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.14:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.7.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.4.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.4.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.6.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.21:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.2.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.0.17:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.15:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.6.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.4.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.6.3",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.0.16:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.2.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.18:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.20:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.1.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.1.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.5.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.22:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.6.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.1.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.4.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.5.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.13:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.5.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.19:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.18:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.5.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.4.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.13:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.8.1a1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.19:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.5.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.15:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.4.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.14:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.23:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.2.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.17:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.1.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.1.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.5.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.16:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.7.12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.16:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:2.2.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.4.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.1.17:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:gnutls:1.3.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2009-2409"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-310"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409",
"refsource": "CONFIRM",
"tags": [],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409"
},
{
"name": "USN-810-1",
"refsource": "UBUNTU",
"tags": [],
"url": "http://www.ubuntu.com/usn/usn-810-1"
},
{
"name": "ADV-2009-2085",
"refsource": "VUPEN",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/2085"
},
{
"name": "1022631",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id?1022631"
},
{
"name": "36139",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36139"
},
{
"name": "36157",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36157"
},
{
"name": "MDVSA-2009:197",
"refsource": "MANDRIVA",
"tags": [],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197"
},
{
"name": "RHSA-2009:1207",
"refsource": "REDHAT",
"tags": [],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1207.html"
},
{
"name": "RHSA-2009:1432",
"refsource": "REDHAT",
"tags": [],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
},
{
"name": "36739",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36739"
},
{
"name": "36434",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36434"
},
{
"name": "DSA-1874",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2009/dsa-1874"
},
{
"name": "http://java.sun.com/javase/6/webnotes/6u17.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://java.sun.com/javase/6/webnotes/6u17.html"
},
{
"name": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
"refsource": "CONFIRM",
"tags": [
"Patch"
],
"url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html"
},
{
"name": "APPLE-SA-2009-11-09-1",
"refsource": "APPLE",
"tags": [
"Vendor Advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html"
},
{
"name": "http://support.apple.com/kb/HT3937",
"refsource": "CONFIRM",
"tags": [],
"url": "http://support.apple.com/kb/HT3937"
},
{
"name": "ADV-2009-3184",
"refsource": "VUPEN",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/3184"
},
{
"name": "GLSA-200911-02",
"refsource": "GENTOO",
"tags": [],
"url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
},
{
"name": "MDVSA-2009:216",
"refsource": "MANDRIVA",
"tags": [],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216"
},
{
"name": "37386",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/37386"
},
{
"name": "MDVSA-2009:258",
"refsource": "MANDRIVA",
"tags": [],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:258"
},
{
"name": "GLSA-200912-01",
"refsource": "GENTOO",
"tags": [],
"url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
},
{
"name": "RHSA-2010:0095",
"refsource": "REDHAT",
"tags": [],
"url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html"
},
{
"name": "MDVSA-2010:084",
"refsource": "MANDRIVA",
"tags": [],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084"
},
{
"name": "ADV-2010-3126",
"refsource": "VUPEN",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2010/3126"
},
{
"name": "42467",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/42467"
},
{
"name": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
},
{
"name": "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
},
{
"name": "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
},
{
"name": "36669",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/36669"
},
{
"name": "DSA-1888",
"refsource": "DEBIAN",
"tags": [],
"url": "https://www.debian.org/security/2009/dsa-1888"
},
{
"name": "oval:org.mitre.oval:def:8594",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594"
},
{
"name": "oval:org.mitre.oval:def:7155",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155"
},
{
"name": "oval:org.mitre.oval:def:6631",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631"
},
{
"name": "oval:org.mitre.oval:def:10763",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763"
},
{
"name": "USN-810-2",
"refsource": "UBUNTU",
"tags": [],
"url": "https://usn.ubuntu.com/810-2/"
},
{
"name": "20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://www.securityfocus.com/archive/1/515055/100/0/threaded"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 4.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2023-02-13T02:20Z",
"publishedDate": "2009-07-30T19:30Z"
}
}
}
FKIE_CVE-2009-2409
Vulnerability from fkie_nvd - Published: 2009-07-30 19:30 - Updated: 2025-04-09 00:30
Severity ?
Summary
The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
References
| URL | Tags | ||
|---|---|---|---|
| secalert@redhat.com | http://java.sun.com/j2se/1.5.0/ReleaseNotes.html | Patch | |
| secalert@redhat.com | http://java.sun.com/javase/6/webnotes/6u17.html | Release Notes | |
| secalert@redhat.com | http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html | Vendor Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/36139 | Vendor Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/36157 | Vendor Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/36434 | Vendor Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/36669 | Not Applicable | |
| secalert@redhat.com | http://secunia.com/advisories/36739 | Not Applicable | |
| secalert@redhat.com | http://secunia.com/advisories/37386 | Not Applicable | |
| secalert@redhat.com | http://secunia.com/advisories/42467 | Not Applicable | |
| secalert@redhat.com | http://security.gentoo.org/glsa/glsa-200911-02.xml | Third Party Advisory | |
| secalert@redhat.com | http://security.gentoo.org/glsa/glsa-200912-01.xml | Third Party Advisory | |
| secalert@redhat.com | http://support.apple.com/kb/HT3937 | Broken Link | |
| secalert@redhat.com | http://www.debian.org/security/2009/dsa-1874 | Mailing List | |
| secalert@redhat.com | http://www.mandriva.com/security/advisories?name=MDVSA-2009:197 | Not Applicable | |
| secalert@redhat.com | http://www.mandriva.com/security/advisories?name=MDVSA-2009:216 | Not Applicable | |
| secalert@redhat.com | http://www.mandriva.com/security/advisories?name=MDVSA-2009:258 | Not Applicable | |
| secalert@redhat.com | http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 | Not Applicable | |
| secalert@redhat.com | http://www.redhat.com/support/errata/RHSA-2009-1207.html | Third Party Advisory | |
| secalert@redhat.com | http://www.redhat.com/support/errata/RHSA-2009-1432.html | Third Party Advisory | |
| secalert@redhat.com | http://www.securityfocus.com/archive/1/515055/100/0/threaded | Broken Link | |
| secalert@redhat.com | http://www.securitytracker.com/id?1022631 | Broken Link | |
| secalert@redhat.com | http://www.ubuntu.com/usn/usn-810-1 | Third Party Advisory | |
| secalert@redhat.com | http://www.vmware.com/security/advisories/VMSA-2010-0019.html | Third Party Advisory | |
| secalert@redhat.com | http://www.vupen.com/english/advisories/2009/2085 | Vendor Advisory | |
| secalert@redhat.com | http://www.vupen.com/english/advisories/2009/3184 | Vendor Advisory | |
| secalert@redhat.com | http://www.vupen.com/english/advisories/2010/3126 | Vendor Advisory | |
| secalert@redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409 | Third Party Advisory | |
| secalert@redhat.com | https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html | Third Party Advisory | |
| secalert@redhat.com | https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html | Third Party Advisory | |
| secalert@redhat.com | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763 | Broken Link | |
| secalert@redhat.com | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631 | Broken Link | |
| secalert@redhat.com | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155 | Broken Link | |
| secalert@redhat.com | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594 | Broken Link | |
| secalert@redhat.com | https://rhn.redhat.com/errata/RHSA-2010-0095.html | Third Party Advisory | |
| secalert@redhat.com | https://usn.ubuntu.com/810-2/ | Broken Link | |
| secalert@redhat.com | https://www.debian.org/security/2009/dsa-1888 | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://java.sun.com/j2se/1.5.0/ReleaseNotes.html | Patch | |
| af854a3a-2127-422b-91ae-364da2661108 | http://java.sun.com/javase/6/webnotes/6u17.html | Release Notes | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/36139 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/36157 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/36434 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/36669 | Not Applicable | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/36739 | Not Applicable | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/37386 | Not Applicable | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/42467 | Not Applicable | |
| af854a3a-2127-422b-91ae-364da2661108 | http://security.gentoo.org/glsa/glsa-200911-02.xml | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://security.gentoo.org/glsa/glsa-200912-01.xml | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://support.apple.com/kb/HT3937 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2009/dsa-1874 | Mailing List | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2009:197 | Not Applicable | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2009:216 | Not Applicable | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2009:258 | Not Applicable | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 | Not Applicable | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.redhat.com/support/errata/RHSA-2009-1207.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.redhat.com/support/errata/RHSA-2009-1432.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/archive/1/515055/100/0/threaded | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id?1022631 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.ubuntu.com/usn/usn-810-1 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vmware.com/security/advisories/VMSA-2010-0019.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2009/2085 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2009/3184 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2010/3126 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | https://rhn.redhat.com/errata/RHSA-2010-0095.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/810-2/ | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.debian.org/security/2009/dsa-1888 | Mailing List, Third Party Advisory |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3306EB88-CE4C-4D5E-BE35-53DE6DEC5C3C",
"versionEndExcluding": "2.6.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
"matchCriteriaId": "66221847-4F1D-4F26-8916-731BDFE5B3A9",
"versionEndExcluding": "2.7.4",
"versionStartIncluding": "2.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A21F310D-7D9F-45D7-974D-C615F99FBEB8",
"versionEndExcluding": "3.12.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
"matchCriteriaId": "06458D9A-4AB2-4B8A-8902-D2A285801347",
"versionEndIncluding": "0.9.8k",
"versionStartIncluding": "0.9.8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large."
},
{
"lang": "es",
"value": "La librer\u00eda Network Security Services (NSS) en versiones anteriores a 3.12.3, como se utiliza en Firefox; GnuTLS en versiones anteriores a 2.6.4 y 2.7.4; OpenSSL 0.9.8 hasta la versi\u00f3n 0.9.8k; y otros productos que soportan MD2 con certificados X.509, lo que podr\u00edan permitir a atacantes remotos falsificar certificados usando defectos de dise\u00f1o de MD2 para generar una colisi\u00f3n de hash en menos que tiempo que con fuerza bruta. NOTA: el alcance de este problema est\u00e1 actualmente limitado porque la cantidad de computaci\u00f3n requerida es todav\u00eda grande."
}
],
"id": "CVE-2009-2409",
"lastModified": "2025-04-09T00:30:58.490",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 4.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2009-07-30T19:30:00.343",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Release Notes"
],
"url": "http://java.sun.com/javase/6/webnotes/6u17.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36139"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36157"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36434"
},
{
"source": "secalert@redhat.com",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/36669"
},
{
"source": "secalert@redhat.com",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/36739"
},
{
"source": "secalert@redhat.com",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/37386"
},
{
"source": "secalert@redhat.com",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/42467"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
},
{
"source": "secalert@redhat.com",
"tags": [
"Broken Link"
],
"url": "http://support.apple.com/kb/HT3937"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List"
],
"url": "http://www.debian.org/security/2009/dsa-1874"
},
{
"source": "secalert@redhat.com",
"tags": [
"Not Applicable"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197"
},
{
"source": "secalert@redhat.com",
"tags": [
"Not Applicable"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216"
},
{
"source": "secalert@redhat.com",
"tags": [
"Not Applicable"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:258"
},
{
"source": "secalert@redhat.com",
"tags": [
"Not Applicable"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1207.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Broken Link"
],
"url": "http://www.securityfocus.com/archive/1/515055/100/0/threaded"
},
{
"source": "secalert@redhat.com",
"tags": [
"Broken Link"
],
"url": "http://www.securitytracker.com/id?1022631"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-810-1"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/2085"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/3184"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2010/3126"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763"
},
{
"source": "secalert@redhat.com",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631"
},
{
"source": "secalert@redhat.com",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155"
},
{
"source": "secalert@redhat.com",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Broken Link"
],
"url": "https://usn.ubuntu.com/810-2/"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2009/dsa-1888"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes"
],
"url": "http://java.sun.com/javase/6/webnotes/6u17.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36139"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36157"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36434"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/36669"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/36739"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/37386"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/42467"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://support.apple.com/kb/HT3937"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "http://www.debian.org/security/2009/dsa-1874"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:258"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1207.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.securityfocus.com/archive/1/515055/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.securitytracker.com/id?1022631"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-810-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/2085"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/3184"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2010/3126"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://usn.ubuntu.com/810-2/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2009/dsa-1888"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-295"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…