Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2013-0162
Vulnerability from cvelistv5
Published
2013-03-01 02:00
Modified
2024-08-06 14:18
Severity ?
EPSS score ?
Summary
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T14:18:09.378Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
},
{
"name": "RHSA-2013:0548",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-0548.html"
},
{
"name": "RHSA-2013:0544",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-0544.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2013-03-01T02:00:00Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
},
{
"name": "RHSA-2013:0548",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-0548.html"
},
{
"name": "RHSA-2013:0544",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-0544.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2013-0162",
"datePublished": "2013-03-01T02:00:00Z",
"dateReserved": "2012-12-06T00:00:00Z",
"dateUpdated": "2024-08-06T14:18:09.378Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2013-0162\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2013-03-01T05:40:16.987\",\"lastModified\":\"2024-11-21T01:46:58.307\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n diff_pp en lib/gauntlet_rubyparser.rb en ruby_parser gem v3.1.1 y anteriores para Ruby, permite a usuarios locales sobrescribir archivos arbitrarios a trav\u00e9s de un ataque de enlace simb\u00f3lico sobre un archivo temporal con un nombre predecible en /tmp.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":2.1,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.1.1\",\"matchCriteriaId\":\"B7CA2D4A-C5D5-4351-A3E6-94F0134ACDFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:1.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1997DD86-5A86-44EF-BFAB-5762036FDB52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EFFFD6C-CE5F-4CDA-9E21-C5092738E70D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AAD69017-946E-46AE-B8E0-CE88870C8474\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6072EC22-3327-4550-98A0-63A5547B8169\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B31D7F1-3546-460B-8433-1F6C600EA5F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED3EF2CD-F764-4174-B4E8-18AA1E25B14F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6C3FA28-CE20-4DF8-802A-135DCF2746F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4589091B-CE69-4A11-9AF9-599A6BBE44BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"972AF9F2-8925-42F4-BCCB-94897C01158B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5DA9AEE-69C2-44F2-86F6-E267C0F94088\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6AA7D179-6F94-44E4-888A-2CA793811FDE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:2.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33AB4A01-A64B-4084-893B-29463D5AAA08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"037A5749-76E0-4633-8761-5AEE5BAA692A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E318EAB3-5E68-4512-A199-C962C1EE4114\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22611B29-93F3-4658-802D-69E58D49B918\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59214551-A32E-428D-AB09-29F136882DFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51FF16A2-9376-44EF-928C-2246407D4A9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26ECD531-FFC6-4F85-BD37-CB9C5065203A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71964D5D-3737-483C-8DF9-F953B2AE8668\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B8B2ED9-7C48-420F-A824-8518BAAB71C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A74D9FE-8B0A-4141-8E4A-8E2362650272\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"373A10DA-2151-445C-A83A-C433CCABD8AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3FF3C93-D13C-4462-8C10-DA2A7FFB70A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9FB6A1F-6E32-4C5C-BE92-CBB99F9040B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9267296D-5A2B-47AE-A870-4E7977BD2156\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FDAD7BE-B981-464D-9FDF-EAAB64D5B841\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0DCAD18-B91F-494F-8121-F1B7198DF9E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ryan_davis:ruby_parser:3.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"823D6F3C-1FC9-4DDC-8C13-C1F9FE54CC39\"}]}]}],\"references\":[{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0544.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0548.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=892806\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0544.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0548.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=892806\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}"
}
}
gsd-2013-0162
Vulnerability from gsd
Modified
2013-02-21 00:00
Details
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2013-0162",
"description": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
"id": "GSD-2013-0162",
"references": [
"https://www.suse.com/security/cve/CVE-2013-0162.html",
"https://access.redhat.com/errata/RHSA-2013:0582",
"https://access.redhat.com/errata/RHSA-2013:0548",
"https://access.redhat.com/errata/RHSA-2013:0544"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"affected": [
{
"package": {
"ecosystem": "RubyGems",
"name": "ruby_parser",
"purl": "pkg:gem/ruby_parser"
}
}
],
"aliases": [
"CVE-2013-0162",
"OSVDB-90561"
],
"details": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
"id": "GSD-2013-0162",
"modified": "2013-02-21T00:00:00.000Z",
"published": "2013-02-21T00:00:00.000Z",
"references": [
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": 2.1,
"type": "CVSS_V2"
}
],
"summary": "CVE-2013-0162 rubygem-ruby_parser: incorrect temporary file usage"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2013-0162",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://rhn.redhat.com/errata/RHSA-2013-0544.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2013-0544.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2013-0548.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2013-0548.html"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=892806",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
}
]
}
},
"github.com/rubysec/ruby-advisory-db": {
"cve": "2013-0162",
"cvss_v2": 2.1,
"date": "2013-02-21",
"description": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
"gem": "ruby_parser",
"osvdb": 90561,
"patched_versions": [
"\u003e= 3.1.2"
],
"title": "CVE-2013-0162 rubygem-ruby_parser: incorrect temporary file usage",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
},
"gitlab.com": {
"advisories": [
{
"affected_range": "\u003e=2.0.2 \u003c=3.1.1",
"affected_versions": "All versions starting from 2.0.2 up to 3.1.1",
"credit": "Michael Scherer",
"cvss_v2": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"cwe_ids": [
"CWE-1035",
"CWE-264",
"CWE-937"
],
"date": "2013-03-01",
"description": "The ruby_parser Gem does not create temporary files securely. In the `diff_pp` function contained in `lib/gauntlet_rubyparser.rb` function, it creates files as `/tmp/a.[pid]` and `/tmp/b.[pid]` which can be predicted and used for either a denial of service (file cannot be overwritten), or to change the contents of files that are writable.",
"fixed_versions": [
"3.1.2"
],
"identifier": "CVE-2013-0162",
"identifiers": [
"CVE-2013-0162"
],
"package_slug": "gem/ruby_parser",
"pubdate": "2013-03-01",
"solution": "Patch available (see source)",
"title": "Incorrect temporary file usage",
"urls": [
"https://bugzilla.redhat.com/show_bug.cgi?id=892806"
],
"uuid": "16f6be81-a61c-4063-b732-c5bd303d5860"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:1.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "3.1.1",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2013-0162"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2013:0544",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2013-0544.html"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=892806",
"refsource": "MISC",
"tags": [
"Patch"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
},
{
"name": "RHSA-2013:0548",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2013-0548.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2023-02-13T04:38Z",
"publishedDate": "2013-03-01T05:40Z"
}
}
}
rhsa-2013_0582
Vulnerability from csaf_redhat
Published
2013-02-28 18:53
Modified
2024-11-22 06:19
Summary
Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1.1 update
Notes
Topic
Red Hat OpenShift Enterprise 1.1.1 is now available.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
OpenShift Enterprise is a cloud computing Platform-as-a-Service (PaaS)
solution from Red Hat, and is designed for on-premise or private cloud
deployments.
Installing the updated packages and restarting the OpenShift services are
the only requirements for this update. However, if you are updating your
system to Red Hat Enterprise Linux 6.4 while applying OpenShift Enterprise
1.1.1 updates, it is recommended that you restart your system.
For further information about this release, refer to the OpenShift
Enterprise 1.1.1 Technical Notes, available shortly from
https://access.redhat.com/knowledge/docs/
This update also fixes the following security issues:
Multiple cross-site scripting (XSS) flaws were found in rubygem-actionpack.
A remote attacker could use these flaws to conduct XSS attacks against
users of an application using rubygem-actionpack. (CVE-2012-3463,
CVE-2012-3464, CVE-2012-3465)
It was found that certain methods did not sanitize file names before
passing them to lower layer routines in Ruby. If a Ruby application created
files with names based on untrusted input, it could result in the creation
of files with different names than expected. (CVE-2012-4522)
A denial of service flaw was found in the implementation of associative
arrays (hashes) in Ruby. An attacker able to supply a large number of
inputs to a Ruby application (such as HTTP POST request parameters sent to
a web application) that are used as keys when inserting data into an array
could trigger multiple hash function collisions, making array operations
take an excessive amount of CPU time. To mitigate this issue, a new, more
collision resistant algorithm has been used to reduce the chance of an
attacker successfully causing intentional collisions. (CVE-2012-5371)
Input validation vulnerabilities were discovered in rubygem-activerecord.
A remote attacker could possibly use these flaws to perform an SQL
injection attack against an application using rubygem-activerecord.
(CVE-2012-2661, CVE-2012-2695, CVE-2013-0155)
Input validation vulnerabilities were discovered in rubygem-actionpack. A
remote attacker could possibly use these flaws to perform an SQL injection
attack against an application using rubygem-actionpack and
rubygem-activerecord. (CVE-2012-2660, CVE-2012-2694)
A flaw was found in the HTTP digest authentication implementation in
rubygem-actionpack. A remote attacker could use this flaw to cause a
denial of service of an application using rubygem-actionpack and digest
authentication. (CVE-2012-3424)
A flaw was found in the handling of strings in Ruby safe level 4. A remote
attacker can use Exception#to_s to destructively modify an untainted string
so that it is tainted, the string can then be arbitrarily modified.
(CVE-2012-4466)
A flaw was found in the method for translating an exception message into a
string in the Ruby Exception class. A remote attacker could use this flaw
to bypass safe level 4 restrictions, allowing untrusted (tainted) code to
modify arbitrary, trusted (untainted) strings, which safe level 4
restrictions would otherwise prevent. (CVE-2012-4464)
It was found that ruby_parser from rubygem-ruby_parser created a temporary
file in an insecure way. A local attacker could use this flaw to perform a
symbolic link attack, overwriting arbitrary files accessible to the
application using ruby_parser. (CVE-2013-0162)
The CVE-2013-0162 issue was discovered by Michael Scherer of the Red Hat
Regional IT team.
Users are advised to upgrade to Red Hat OpenShift Enterprise 1.1.1.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Enterprise 1.1.1 is now available.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Enterprise is a cloud computing Platform-as-a-Service (PaaS)\nsolution from Red Hat, and is designed for on-premise or private cloud\ndeployments.\n\nInstalling the updated packages and restarting the OpenShift services are\nthe only requirements for this update. However, if you are updating your\nsystem to Red Hat Enterprise Linux 6.4 while applying OpenShift Enterprise\n1.1.1 updates, it is recommended that you restart your system.\n\nFor further information about this release, refer to the OpenShift\nEnterprise 1.1.1 Technical Notes, available shortly from\nhttps://access.redhat.com/knowledge/docs/\n\nThis update also fixes the following security issues:\n\nMultiple cross-site scripting (XSS) flaws were found in rubygem-actionpack.\nA remote attacker could use these flaws to conduct XSS attacks against\nusers of an application using rubygem-actionpack. (CVE-2012-3463,\nCVE-2012-3464, CVE-2012-3465)\n\nIt was found that certain methods did not sanitize file names before\npassing them to lower layer routines in Ruby. If a Ruby application created\nfiles with names based on untrusted input, it could result in the creation\nof files with different names than expected. (CVE-2012-4522)\n\nA denial of service flaw was found in the implementation of associative\narrays (hashes) in Ruby. An attacker able to supply a large number of\ninputs to a Ruby application (such as HTTP POST request parameters sent to\na web application) that are used as keys when inserting data into an array\ncould trigger multiple hash function collisions, making array operations\ntake an excessive amount of CPU time. To mitigate this issue, a new, more\ncollision resistant algorithm has been used to reduce the chance of an\nattacker successfully causing intentional collisions. (CVE-2012-5371)\n\nInput validation vulnerabilities were discovered in rubygem-activerecord.\nA remote attacker could possibly use these flaws to perform an SQL\ninjection attack against an application using rubygem-activerecord.\n(CVE-2012-2661, CVE-2012-2695, CVE-2013-0155)\n\nInput validation vulnerabilities were discovered in rubygem-actionpack. A\nremote attacker could possibly use these flaws to perform an SQL injection\nattack against an application using rubygem-actionpack and\nrubygem-activerecord. (CVE-2012-2660, CVE-2012-2694)\n\nA flaw was found in the HTTP digest authentication implementation in\nrubygem-actionpack. A remote attacker could use this flaw to cause a\ndenial of service of an application using rubygem-actionpack and digest\nauthentication. (CVE-2012-3424)\n\nA flaw was found in the handling of strings in Ruby safe level 4. A remote\nattacker can use Exception#to_s to destructively modify an untainted string\nso that it is tainted, the string can then be arbitrarily modified.\n(CVE-2012-4466)\n\nA flaw was found in the method for translating an exception message into a\nstring in the Ruby Exception class. A remote attacker could use this flaw\nto bypass safe level 4 restrictions, allowing untrusted (tainted) code to\nmodify arbitrary, trusted (untainted) strings, which safe level 4\nrestrictions would otherwise prevent. (CVE-2012-4464)\n\nIt was found that ruby_parser from rubygem-ruby_parser created a temporary\nfile in an insecure way. A local attacker could use this flaw to perform a\nsymbolic link attack, overwriting arbitrary files accessible to the\napplication using ruby_parser. (CVE-2013-0162)\n\nThe CVE-2013-0162 issue was discovered by Michael Scherer of the Red Hat\nRegional IT team.\n\nUsers are advised to upgrade to Red Hat OpenShift Enterprise 1.1.1.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2013:0582",
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/knowledge/docs/",
"url": "https://access.redhat.com/knowledge/docs/"
},
{
"category": "external",
"summary": "827353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=827353"
},
{
"category": "external",
"summary": "827363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=827363"
},
{
"category": "external",
"summary": "831573",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=831573"
},
{
"category": "external",
"summary": "831581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=831581"
},
{
"category": "external",
"summary": "843711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=843711"
},
{
"category": "external",
"summary": "847196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847196"
},
{
"category": "external",
"summary": "847199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847199"
},
{
"category": "external",
"summary": "847200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847200"
},
{
"category": "external",
"summary": "862598",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=862598"
},
{
"category": "external",
"summary": "862614",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=862614"
},
{
"category": "external",
"summary": "865940",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=865940"
},
{
"category": "external",
"summary": "875236",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=875236"
},
{
"category": "external",
"summary": "887353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=887353"
},
{
"category": "external",
"summary": "889426",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=889426"
},
{
"category": "external",
"summary": "892806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
},
{
"category": "external",
"summary": "892866",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892866"
},
{
"category": "external",
"summary": "895347",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895347"
},
{
"category": "external",
"summary": "895355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895355"
},
{
"category": "external",
"summary": "902412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=902412"
},
{
"category": "external",
"summary": "902630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=902630"
},
{
"category": "external",
"summary": "903526",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=903526"
},
{
"category": "external",
"summary": "903546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=903546"
},
{
"category": "external",
"summary": "905021",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=905021"
},
{
"category": "external",
"summary": "905656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=905656"
},
{
"category": "external",
"summary": "906227",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=906227"
},
{
"category": "external",
"summary": "906845",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=906845"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0582.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1.1 update",
"tracking": {
"current_release_date": "2024-11-22T06:19:59+00:00",
"generator": {
"date": "2024-11-22T06:19:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2013:0582",
"initial_release_date": "2013-02-28T18:53:00+00:00",
"revision_history": [
{
"date": "2013-02-28T18:53:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2013-02-28T19:05:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T06:19:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Enterprise Infrastructure",
"product": {
"name": "Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift Enterprise Node",
"product": {
"name": "Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift Enterprise JBoss EAP add-on",
"product": {
"name": "Red Hat OpenShift Enterprise JBoss EAP add-on",
"product_id": "6Server-RHOSE-JBOSSEAP",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:1::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rubygem-actionpack-1:3.0.13-4.el6op.src",
"product": {
"name": "rubygem-actionpack-1:3.0.13-4.el6op.src",
"product_id": "rubygem-actionpack-1:3.0.13-4.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionpack@3.0.13-4.el6op?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"product": {
"name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"product_id": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-node@1.0.11-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"product": {
"name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"product_id": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-msg-node-mcollective@1.0.3-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"product": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"product_id": "rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"product_id": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-cron-1.4@1.0.3-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"product_id": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-diy-0.1@1.0.3-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"product_id": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-haproxy-1.4@1.0.4-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins-client-1.4@1.0.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"product_id": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-perl-5.10@1.0.3-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"product_id": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-mysql-5.1@1.0.5-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins-1.4@1.0.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"product": {
"name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"product_id": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-postgresql-8.4@1.0.3-2.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"product_id": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-ruby-1.9-scl@1.0.8-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"product_id": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-ruby-1.8@1.0.7-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"product_id": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-php-5.3@1.0.5-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"product": {
"name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"product_id": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-auth-remote-user@1.0.5-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-broker-0:1.0.11-1.el6op.src",
"product": {
"name": "openshift-origin-broker-0:1.0.11-1.el6op.src",
"product_id": "openshift-origin-broker-0:1.0.11-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-broker@1.0.11-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-console-0:0.0.16-1.el6op.src",
"product": {
"name": "openshift-console-0:0.0.16-1.el6op.src",
"product_id": "openshift-console-0:0.0.16-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-console@0.0.16-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"product": {
"name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"product_id": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-console@1.0.10-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"product_id": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbosseap-6.0@1.0.4-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"product_id": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbossews-1.0@1.0.13-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-bson-0:1.8.1-2.el6op.src",
"product": {
"name": "rubygem-bson-0:1.8.1-2.el6op.src",
"product_id": "rubygem-bson-0:1.8.1-2.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-bson@1.8.1-2.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-mongo-0:1.8.1-2.el6op.src",
"product": {
"name": "rubygem-mongo-0:1.8.1-2.el6op.src",
"product_id": "rubygem-mongo-0:1.8.1-2.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-mongo@1.8.1-2.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"product": {
"name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"product_id": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-controller@1.0.12-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "graphviz-0:2.26.0-10.el6.src",
"product": {
"name": "graphviz-0:2.26.0-10.el6.src",
"product_id": "graphviz-0:2.26.0-10.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/graphviz@2.26.0-10.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "php-0:5.3.3-22.el6.src",
"product": {
"name": "php-0:5.3.3-22.el6.src",
"product_id": "php-0:5.3.3-22.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/php@5.3.3-22.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"product": {
"name": "ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"product_id": "ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-railties@3.2.8-2.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"product": {
"name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"product_id": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-activerecord@3.2.8-3.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"product": {
"name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"product_id": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-actionpack@3.2.8-3.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"product": {
"name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"product_id": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-activemodel@3.2.8-2.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"product": {
"name": "openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"product_id": "openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-broker-util@1.0.15-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "ruby193-ruby-0:1.9.3.327-25.el6.src",
"product": {
"name": "ruby193-ruby-0:1.9.3.327-25.el6.src",
"product_id": "ruby193-ruby-0:1.9.3.327-25.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-ruby@1.9.3.327-25.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"product": {
"name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"product_id": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-ruby_parser@2.3.1-3.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activerecord-1:3.0.13-5.el6op.src",
"product": {
"name": "rubygem-activerecord-1:3.0.13-5.el6op.src",
"product_id": "rubygem-activerecord-1:3.0.13-5.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activerecord@3.0.13-5.el6op?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-activemodel-0:3.0.13-3.el6op.src",
"product": {
"name": "rubygem-activemodel-0:3.0.13-3.el6op.src",
"product_id": "rubygem-activemodel-0:3.0.13-3.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activemodel@3.0.13-3.el6op?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"product": {
"name": "rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"product_id": "rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionpack@3.0.13-4.el6op?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-node@1.0.11-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"product": {
"name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"product_id": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-msg-node-mcollective@1.0.3-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"product": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"product_id": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"product": {
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"product_id": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ruby_parser-doc@2.0.4-6.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-cron-1.4@1.0.3-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-diy-0.1@1.0.3-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-haproxy-1.4@1.0.4-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins-client-1.4@1.0.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-perl-5.10@1.0.3-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-mysql-5.1@1.0.5-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins-1.4@1.0.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"product_id": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-postgresql-8.4@1.0.3-2.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-ruby-1.9-scl@1.0.8-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-ruby-1.8@1.0.7-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-php-5.3@1.0.5-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-auth-remote-user@1.0.5-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"product": {
"name": "openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"product_id": "openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-broker@1.0.11-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-console-0:0.0.16-1.el6op.noarch",
"product": {
"name": "openshift-console-0:0.0.16-1.el6op.noarch",
"product_id": "openshift-console-0:0.0.16-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-console@0.0.16-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-console-doc@1.0.10-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-console@1.0.10-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbosseap-6.0@1.0.4-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbossews-1.0@1.0.13-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-bson-0:1.8.1-2.el6op.noarch",
"product": {
"name": "rubygem-bson-0:1.8.1-2.el6op.noarch",
"product_id": "rubygem-bson-0:1.8.1-2.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-bson@1.8.1-2.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-mongo-0:1.8.1-2.el6op.noarch",
"product": {
"name": "rubygem-mongo-0:1.8.1-2.el6op.noarch",
"product_id": "rubygem-mongo-0:1.8.1-2.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-mongo@1.8.1-2.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"product": {
"name": "rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"product_id": "rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-mongo-doc@1.8.1-2.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-controller@1.0.12-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"product": {
"name": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"product_id": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-railties@3.2.8-2.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"product": {
"name": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"product_id": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-railties-doc@3.2.8-2.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"product": {
"name": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"product_id": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-activerecord-doc@3.2.8-3.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"product": {
"name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"product_id": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-activerecord@3.2.8-3.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"product": {
"name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"product_id": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-actionpack@3.2.8-3.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"product": {
"name": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"product_id": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-actionpack-doc@3.2.8-3.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"product": {
"name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"product_id": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-activemodel@3.2.8-2.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"product": {
"name": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"product_id": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-activemodel-doc@3.2.8-2.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"product": {
"name": "openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"product_id": "openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-broker-util@1.0.15-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"product": {
"name": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"product_id": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygems-devel@1.8.23-25.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"product": {
"name": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"product_id": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-ruby-irb@1.9.3.327-25.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"product": {
"name": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"product_id": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-rake@0.9.2.2-25.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygems-0:1.8.23-25.el6.noarch",
"product": {
"name": "ruby193-rubygems-0:1.8.23-25.el6.noarch",
"product_id": "ruby193-rubygems-0:1.8.23-25.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygems@1.8.23-25.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"product": {
"name": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"product_id": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-minitest@2.5.1-25.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"product": {
"name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"product_id": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-ruby_parser@2.3.1-3.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"product": {
"name": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"product_id": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-ruby_parser-doc@2.3.1-3.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"product": {
"name": "rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"product_id": "rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activerecord@3.0.13-5.el6op?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"product": {
"name": "rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"product_id": "rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activemodel@3.0.13-3.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"product": {
"name": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"product_id": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activemodel-doc@3.0.13-3.el6op?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "graphviz-ruby-0:2.26.0-10.el6.x86_64",
"product": {
"name": "graphviz-ruby-0:2.26.0-10.el6.x86_64",
"product_id": "graphviz-ruby-0:2.26.0-10.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/graphviz-ruby@2.26.0-10.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "graphviz-doc-0:2.26.0-10.el6.x86_64",
"product": {
"name": "graphviz-doc-0:2.26.0-10.el6.x86_64",
"product_id": "graphviz-doc-0:2.26.0-10.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/graphviz-doc@2.26.0-10.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "graphviz-gd-0:2.26.0-10.el6.x86_64",
"product": {
"name": "graphviz-gd-0:2.26.0-10.el6.x86_64",
"product_id": "graphviz-gd-0:2.26.0-10.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/graphviz-gd@2.26.0-10.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "graphviz-devel-0:2.26.0-10.el6.x86_64",
"product": {
"name": "graphviz-devel-0:2.26.0-10.el6.x86_64",
"product_id": "graphviz-devel-0:2.26.0-10.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/graphviz-devel@2.26.0-10.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"product": {
"name": "graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"product_id": "graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/graphviz-debuginfo@2.26.0-10.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "graphviz-0:2.26.0-10.el6.x86_64",
"product": {
"name": "graphviz-0:2.26.0-10.el6.x86_64",
"product_id": "graphviz-0:2.26.0-10.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/graphviz@2.26.0-10.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "php-mbstring-0:5.3.3-22.el6.x86_64",
"product": {
"name": "php-mbstring-0:5.3.3-22.el6.x86_64",
"product_id": "php-mbstring-0:5.3.3-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/php-mbstring@5.3.3-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "php-devel-0:5.3.3-22.el6.x86_64",
"product": {
"name": "php-devel-0:5.3.3-22.el6.x86_64",
"product_id": "php-devel-0:5.3.3-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/php-devel@5.3.3-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "php-process-0:5.3.3-22.el6.x86_64",
"product": {
"name": "php-process-0:5.3.3-22.el6.x86_64",
"product_id": "php-process-0:5.3.3-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/php-process@5.3.3-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "php-bcmath-0:5.3.3-22.el6.x86_64",
"product": {
"name": "php-bcmath-0:5.3.3-22.el6.x86_64",
"product_id": "php-bcmath-0:5.3.3-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/php-bcmath@5.3.3-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "php-debuginfo-0:5.3.3-22.el6.x86_64",
"product": {
"name": "php-debuginfo-0:5.3.3-22.el6.x86_64",
"product_id": "php-debuginfo-0:5.3.3-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/php-debuginfo@5.3.3-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "php-imap-0:5.3.3-22.el6.x86_64",
"product": {
"name": "php-imap-0:5.3.3-22.el6.x86_64",
"product_id": "php-imap-0:5.3.3-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/php-imap@5.3.3-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"product": {
"name": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"product_id": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-bigdecimal@1.1.0-25.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"product": {
"name": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"product_id": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-ruby@1.9.3.327-25.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"product": {
"name": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"product_id": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-io-console@0.3-25.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"product": {
"name": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"product_id": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-ruby-libs@1.9.3.327-25.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"product": {
"name": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"product_id": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-rdoc@3.9.4-25.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"product": {
"name": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"product_id": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-ruby-doc@1.9.3.327-25.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"product": {
"name": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"product_id": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-ruby-devel@1.9.3.327-25.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"product": {
"name": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"product_id": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-rubygem-json@1.5.4-25.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"product": {
"name": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"product_id": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-ruby-tcltk@1.9.3.327-25.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"product": {
"name": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"product_id": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby193-ruby-debuginfo@1.9.3.327-25.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "graphviz-0:2.26.0-10.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src"
},
"product_reference": "graphviz-0:2.26.0-10.el6.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "graphviz-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64"
},
"product_reference": "graphviz-0:2.26.0-10.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "graphviz-debuginfo-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64"
},
"product_reference": "graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "graphviz-devel-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64"
},
"product_reference": "graphviz-devel-0:2.26.0-10.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "graphviz-doc-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64"
},
"product_reference": "graphviz-doc-0:2.26.0-10.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "graphviz-gd-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64"
},
"product_reference": "graphviz-gd-0:2.26.0-10.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "graphviz-ruby-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64"
},
"product_reference": "graphviz-ruby-0:2.26.0-10.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-console-0:0.0.16-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch"
},
"product_reference": "openshift-console-0:0.0.16-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-console-0:0.0.16-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src"
},
"product_reference": "openshift-console-0:0.0.16-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-broker-0:1.0.11-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch"
},
"product_reference": "openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-broker-0:1.0.11-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src"
},
"product_reference": "openshift-origin-broker-0:1.0.11-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-broker-util-0:1.0.15-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch"
},
"product_reference": "openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-broker-util-0:1.0.15-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src"
},
"product_reference": "openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-0:1.9.3.327-25.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src"
},
"product_reference": "ruby193-ruby-0:1.9.3.327-25.el6.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch"
},
"product_reference": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch"
},
"product_reference": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src"
},
"product_reference": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch"
},
"product_reference": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch"
},
"product_reference": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src"
},
"product_reference": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch"
},
"product_reference": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch"
},
"product_reference": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src"
},
"product_reference": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch"
},
"product_reference": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64"
},
"product_reference": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64"
},
"product_reference": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64"
},
"product_reference": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch"
},
"product_reference": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch"
},
"product_reference": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-railties-0:3.2.8-2.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src"
},
"product_reference": "ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch"
},
"product_reference": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch"
},
"product_reference": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64"
},
"product_reference": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch"
},
"product_reference": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src"
},
"product_reference": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch"
},
"product_reference": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygems-0:1.8.23-25.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch"
},
"product_reference": "ruby193-rubygems-0:1.8.23-25.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch"
},
"product_reference": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionpack-1:3.0.13-4.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch"
},
"product_reference": "rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionpack-1:3.0.13-4.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src"
},
"product_reference": "rubygem-actionpack-1:3.0.13-4.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activemodel-0:3.0.13-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch"
},
"product_reference": "rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activemodel-0:3.0.13-3.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src"
},
"product_reference": "rubygem-activemodel-0:3.0.13-3.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch"
},
"product_reference": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activerecord-1:3.0.13-5.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch"
},
"product_reference": "rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activerecord-1:3.0.13-5.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src"
},
"product_reference": "rubygem-activerecord-1:3.0.13-5.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-bson-0:1.8.1-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch"
},
"product_reference": "rubygem-bson-0:1.8.1-2.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-bson-0:1.8.1-2.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src"
},
"product_reference": "rubygem-bson-0:1.8.1-2.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-mongo-0:1.8.1-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch"
},
"product_reference": "rubygem-mongo-0:1.8.1-2.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-mongo-0:1.8.1-2.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src"
},
"product_reference": "rubygem-mongo-0:1.8.1-2.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-mongo-doc-0:1.8.1-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch"
},
"product_reference": "rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src"
},
"product_reference": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src"
},
"product_reference": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src"
},
"product_reference": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch"
},
"product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src"
},
"product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure",
"product_id": "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
},
"product_reference": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch as a component of Red Hat OpenShift Enterprise JBoss EAP add-on",
"product_id": "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-JBOSSEAP"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src as a component of Red Hat OpenShift Enterprise JBoss EAP add-on",
"product_id": "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-JBOSSEAP"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src"
},
"product_reference": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch"
},
"product_reference": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src"
},
"product_reference": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-0:5.3.3-22.el6.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src"
},
"product_reference": "php-0:5.3.3-22.el6.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-bcmath-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64"
},
"product_reference": "php-bcmath-0:5.3.3-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-debuginfo-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64"
},
"product_reference": "php-debuginfo-0:5.3.3-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-devel-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64"
},
"product_reference": "php-devel-0:5.3.3-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-imap-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64"
},
"product_reference": "php-imap-0:5.3.3-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-mbstring-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64"
},
"product_reference": "php-mbstring-0:5.3.3-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-process-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64"
},
"product_reference": "php-process-0:5.3.3-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-0:1.9.3.327-25.el6.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src"
},
"product_reference": "ruby193-ruby-0:1.9.3.327-25.el6.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch"
},
"product_reference": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64"
},
"product_reference": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch"
},
"product_reference": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src"
},
"product_reference": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch"
},
"product_reference": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch"
},
"product_reference": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src"
},
"product_reference": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch"
},
"product_reference": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch"
},
"product_reference": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src"
},
"product_reference": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch"
},
"product_reference": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64"
},
"product_reference": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64"
},
"product_reference": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64"
},
"product_reference": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch"
},
"product_reference": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch"
},
"product_reference": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-railties-0:3.2.8-2.el6.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src"
},
"product_reference": "ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch"
},
"product_reference": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch"
},
"product_reference": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64"
},
"product_reference": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch"
},
"product_reference": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src"
},
"product_reference": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch"
},
"product_reference": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygems-0:1.8.23-25.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch"
},
"product_reference": "ruby193-rubygems-0:1.8.23-25.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch"
},
"product_reference": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activemodel-0:3.0.13-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch"
},
"product_reference": "rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activemodel-0:3.0.13-3.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src"
},
"product_reference": "rubygem-activemodel-0:3.0.13-3.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch"
},
"product_reference": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-bson-0:1.8.1-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch"
},
"product_reference": "rubygem-bson-0:1.8.1-2.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-bson-0:1.8.1-2.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src"
},
"product_reference": "rubygem-bson-0:1.8.1-2.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src"
},
"product_reference": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch"
},
"product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6op.src as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src"
},
"product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch as a component of Red Hat OpenShift Enterprise Node",
"product_id": "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
},
"product_reference": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-2660",
"discovery_date": "2012-05-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "827353"
}
],
"notes": [
{
"category": "description",
"text": "actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain \"[nil]\" values, a related issue to CVE-2012-2694.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Unsafe query generation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-2660"
},
{
"category": "external",
"summary": "RHBZ#827353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=827353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-2660",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2660"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-2660",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2660"
}
],
"release_date": "2012-05-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-actionpack: Unsafe query generation"
},
{
"cve": "CVE-2012-2661",
"discovery_date": "2012-05-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "827363"
}
],
"notes": [
{
"category": "description",
"text": "The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage unintended recursion, a related issue to CVE-2012-2695.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: SQL injection when processing nested query paramaters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-2661"
},
{
"category": "external",
"summary": "RHBZ#827363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=827363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-2661",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2661"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-2661",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2661"
}
],
"release_date": "2012-05-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-activerecord: SQL injection when processing nested query paramaters"
},
{
"cve": "CVE-2012-2694",
"cwe": {
"id": "CWE-305",
"name": "Authentication Bypass by Primary Weakness"
},
"discovery_date": "2012-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "831581"
}
],
"notes": [
{
"category": "description",
"text": "actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain \"[\u0027xyz\u0027, nil]\" values, a related issue to CVE-2012-2660.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-2694"
},
{
"category": "external",
"summary": "RHBZ#831581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=831581"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-2694",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2694"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-2694",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2694"
}
],
"release_date": "2012-06-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660)"
},
{
"cve": "CVE-2012-2695",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2012-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "831573"
}
],
"notes": [
{
"category": "description",
"text": "The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage improper handling of nested hashes, a related issue to CVE-2012-2661.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-2695"
},
{
"category": "external",
"summary": "RHBZ#831573",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=831573"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-2695",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2695"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-2695",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2695"
}
],
"release_date": "2012-06-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661)"
},
{
"cve": "CVE-2012-3424",
"discovery_date": "2012-07-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "843711"
}
],
"notes": [
{
"category": "description",
"text": "The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access to an application that uses a with_http_digest helper method, as demonstrated by the authenticate_or_request_with_http_digest method.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3424"
},
{
"category": "external",
"summary": "RHBZ#843711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=843711"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3424",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3424"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3424",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3424"
}
],
"release_date": "2012-07-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest"
},
{
"cve": "CVE-2012-3463",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-08-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "847196"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the select_tag helper.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: potential XSS vulnerability in select_tag prompt",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3463"
},
{
"category": "external",
"summary": "RHBZ#847196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3463",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3463"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3463",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3463"
}
],
"release_date": "2012-08-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: potential XSS vulnerability in select_tag prompt"
},
{
"cve": "CVE-2012-3464",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-08-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "847199"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a \u0027 (quote) character.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: potential XSS vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3464"
},
{
"category": "external",
"summary": "RHBZ#847199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847199"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3464",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3464"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3464",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3464"
}
],
"release_date": "2012-08-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: potential XSS vulnerability"
},
{
"cve": "CVE-2012-3465",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-08-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "847200"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: XSS Vulnerability in strip_tags",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3465"
},
{
"category": "external",
"summary": "RHBZ#847200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3465",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3465"
}
],
"release_date": "2012-08-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: XSS Vulnerability in strip_tags"
},
{
"cve": "CVE-2012-4464",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2012-09-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "862598"
}
],
"notes": [
{
"category": "description",
"text": "Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the (1) exc_to_s or (2) name_err_to_s API function, which marks the string as tainted, a different vulnerability than CVE-2012-4466. NOTE: this issue might exist because of a CVE-2011-1005 regression.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "1.9.3: Possibility to bypass Ruby\u0027s $SAFE (level 4) semantics",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Not vulnerable. This issue did not affect the versions of ruby as shipped with Red Hat Enterprise Linux 5 and 6 as they did not provide version 1.9.x, which is the vulnerable version of ruby.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-4464"
},
{
"category": "external",
"summary": "RHBZ#862598",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=862598"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-4464",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-4464"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4464",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4464"
}
],
"release_date": "2012-09-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "1.9.3: Possibility to bypass Ruby\u0027s $SAFE (level 4) semantics"
},
{
"cve": "CVE-2012-4466",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2012-10-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "862614"
}
],
"notes": [
{
"category": "description",
"text": "Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the name_err_mesg_to_str API function, which marks the string as tainted, a different vulnerability than CVE-2011-1005.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: safe level bypass via name_err_mesg_to_str()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-4466"
},
{
"category": "external",
"summary": "RHBZ#862614",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=862614"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-4466",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-4466"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4466",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4466"
}
],
"release_date": "2012-10-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "ruby: safe level bypass via name_err_mesg_to_str()"
},
{
"cve": "CVE-2012-4522",
"cwe": {
"id": "CWE-626",
"name": "Null Byte Interaction Error (Poison Null Byte)"
},
"discovery_date": "2012-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "865940"
}
],
"notes": [
{
"category": "description",
"text": "The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: unintentional file creation caused by inserting an illegal NUL character",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of ruby as shipped with Red Hat Enterprise Linux 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-4522"
},
{
"category": "external",
"summary": "RHBZ#865940",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=865940"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-4522",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-4522"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4522",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4522"
}
],
"release_date": "2012-10-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ruby: unintentional file creation caused by inserting an illegal NUL character"
},
{
"cve": "CVE-2012-5371",
"discovery_date": "2012-11-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "875236"
}
],
"notes": [
{
"category": "description",
"text": "Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against a variant of the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4815.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: Murmur hash-flooding DoS flaw in ruby 1.9 (oCERT-2012-001)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Not vulnerable. This issue did not affect the versions of ruby as shipped with Red Hat Enterprise Linux 5 and 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-5371"
},
{
"category": "external",
"summary": "RHBZ#875236",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=875236"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-5371",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-5371"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-5371",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5371"
}
],
"release_date": "2012-11-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ruby: Murmur hash-flooding DoS flaw in ruby 1.9 (oCERT-2012-001)"
},
{
"cve": "CVE-2013-0155",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2013-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "892866"
}
],
"notes": [
{
"category": "description",
"text": "Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain \"[nil]\" values, a related issue to CVE-2012-2660 and CVE-2012-2694.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0155"
},
{
"category": "external",
"summary": "RHBZ#892866",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892866"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0155",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0155"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0155",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0155"
}
],
"release_date": "2013-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails"
},
{
"acknowledgments": [
{
"names": [
"Michael Scherer"
],
"organization": "Red Hat Regional IT team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-0162",
"cwe": {
"id": "CWE-377",
"name": "Insecure Temporary File"
},
"discovery_date": "2013-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "892806"
}
],
"notes": [
{
"category": "description",
"text": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-ruby_parser: incorrect temporary file usage",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0162"
},
{
"category": "external",
"summary": "RHBZ#892806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0162",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0162"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
}
],
"release_date": "2013-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-ruby_parser: incorrect temporary file usage"
},
{
"cve": "CVE-2013-0276",
"discovery_date": "2013-02-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "909528"
}
],
"notes": [
{
"category": "description",
"text": "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0276"
},
{
"category": "external",
"summary": "RHBZ#909528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=909528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0276",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0276"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0276",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0276"
}
],
"release_date": "2013-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-28T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src",
"6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch",
"6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src",
"6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch",
"6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src",
"6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src",
"6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src",
"6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src",
"6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src",
"6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src",
"6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch",
"6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src",
"6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected"
}
]
}
rhsa-2013_0544
Vulnerability from csaf_redhat
Published
2013-02-21 19:04
Modified
2024-11-22 06:14
Summary
Red Hat Security Advisory: Subscription Asset Manager 1.2 update
Notes
Topic
Red Hat Subscription Asset Manager 1.2, which fixes several security
issues, multiple bugs, and adds various enhancements, is now available.
The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.
[Updated 25th February 2013]
This erratum previously failed to include the updated rubygem-rack package.
It also previously incorrectly documented CVE-2012-5604 as being fixed,
however that issue never affected Subscription Asset Manager and is no
longer listed. As well, CVE-2012-6496 was described as being fixed, however
that issue had previously been fixed in RHSA-2013:0154.
Details
Red Hat Subscription Asset Manager acts as a proxy for handling
subscription information and software updates on client machines.
It was discovered that Katello did not properly check user permissions when
handling certain requests. An authenticated remote attacker could use this
flaw to download consumer certificates or change settings of other users'
systems if they knew the target system's UUID. (CVE-2012-5603)
It was found that the
"/usr/share/katello/script/katello-generate-passphrase" utility, which is
run during the installation and configuration process, set world-readable
permissions on the "/etc/katello/secure/passphrase" file. A local attacker
could use this flaw to obtain the passphrase for Katello, giving them
access to information they would otherwise not have access to.
(CVE-2012-5561)
Note: After installing this update, ensure the
"/etc/katello/secure/passphrase" file is owned by the root user and group
and mode 0750 permissions. Sites should also consider re-creating the
Katello passphrase as this issue exposed it to local users.
Three flaws were found in rubygem-rack. A remote attacker could use these
flaws to perform a denial of service attack against applications using
rubygem-rack. (CVE-2012-6109, CVE-2013-0183, CVE-2013-0184)
It was found that ruby_parser from rubygem-ruby_parser created a temporary
file in an insecure way. A local attacker could use this flaw to perform a
symbolic link attack, overwriting arbitrary files accessible to the
application using ruby_parser. (CVE-2013-0162)
The CVE-2012-5603 issue was discovered by Lukas Zapletal of Red Hat;
CVE-2012-5561 was discovered by Aaron Weitekamp of the Red Hat Cloud
Quality Engineering team; and CVE-2013-0162 was discovered by Michael
Scherer of the Red Hat Regional IT team.
These updated Subscription Asset Manager packages include a number of bug
fixes and enhancements. Space precludes documenting all of these changes
in this advisory. Refer to the Red Hat Subscription Asset Manager 1.2
Release Notes for information about these changes:
https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Subscription_Asset_Manager/1.2/html/Release_Notes/index.html
All users of Red Hat Subscription Asset Manager are advised to upgrade to
these updated packages, which fix these issues and add various
enhancements.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Subscription Asset Manager 1.2, which fixes several security\nissues, multiple bugs, and adds various enhancements, is now available.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\n[Updated 25th February 2013]\nThis erratum previously failed to include the updated rubygem-rack package.\nIt also previously incorrectly documented CVE-2012-5604 as being fixed,\nhowever that issue never affected Subscription Asset Manager and is no\nlonger listed. As well, CVE-2012-6496 was described as being fixed, however\nthat issue had previously been fixed in RHSA-2013:0154.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Subscription Asset Manager acts as a proxy for handling\nsubscription information and software updates on client machines.\n\nIt was discovered that Katello did not properly check user permissions when\nhandling certain requests. An authenticated remote attacker could use this\nflaw to download consumer certificates or change settings of other users\u0027\nsystems if they knew the target system\u0027s UUID. (CVE-2012-5603)\n\nIt was found that the\n\"/usr/share/katello/script/katello-generate-passphrase\" utility, which is\nrun during the installation and configuration process, set world-readable\npermissions on the \"/etc/katello/secure/passphrase\" file. A local attacker\ncould use this flaw to obtain the passphrase for Katello, giving them\naccess to information they would otherwise not have access to.\n(CVE-2012-5561)\n\nNote: After installing this update, ensure the\n\"/etc/katello/secure/passphrase\" file is owned by the root user and group\nand mode 0750 permissions. Sites should also consider re-creating the\nKatello passphrase as this issue exposed it to local users.\n\nThree flaws were found in rubygem-rack. A remote attacker could use these\nflaws to perform a denial of service attack against applications using\nrubygem-rack. (CVE-2012-6109, CVE-2013-0183, CVE-2013-0184)\n\nIt was found that ruby_parser from rubygem-ruby_parser created a temporary\nfile in an insecure way. A local attacker could use this flaw to perform a\nsymbolic link attack, overwriting arbitrary files accessible to the\napplication using ruby_parser. (CVE-2013-0162)\n\nThe CVE-2012-5603 issue was discovered by Lukas Zapletal of Red Hat;\nCVE-2012-5561 was discovered by Aaron Weitekamp of the Red Hat Cloud\nQuality Engineering team; and CVE-2013-0162 was discovered by Michael\nScherer of the Red Hat Regional IT team.\n\nThese updated Subscription Asset Manager packages include a number of bug\nfixes and enhancements. Space precludes documenting all of these changes\nin this advisory. Refer to the Red Hat Subscription Asset Manager 1.2\nRelease Notes for information about these changes:\n\nhttps://access.redhat.com/knowledge/docs/en-US/Red_Hat_Subscription_Asset_Manager/1.2/html/Release_Notes/index.html\n\nAll users of Red Hat Subscription Asset Manager are advised to upgrade to\nthese updated packages, which fix these issues and add various\nenhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2013:0544",
"url": "https://access.redhat.com/errata/RHSA-2013:0544"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Subscription_Asset_Manager/1.2/html/Release_Notes/index.html",
"url": "https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Subscription_Asset_Manager/1.2/html/Release_Notes/index.html"
},
{
"category": "external",
"summary": "760564",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=760564"
},
{
"category": "external",
"summary": "800145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=800145"
},
{
"category": "external",
"summary": "809823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=809823"
},
{
"category": "external",
"summary": "813291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=813291"
},
{
"category": "external",
"summary": "817845",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=817845"
},
{
"category": "external",
"summary": "817946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=817946"
},
{
"category": "external",
"summary": "818679",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=818679"
},
{
"category": "external",
"summary": "818903",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=818903"
},
{
"category": "external",
"summary": "819002",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=819002"
},
{
"category": "external",
"summary": "819611",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=819611"
},
{
"category": "external",
"summary": "822942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=822942"
},
{
"category": "external",
"summary": "822943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=822943"
},
{
"category": "external",
"summary": "822945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=822945"
},
{
"category": "external",
"summary": "826099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=826099"
},
{
"category": "external",
"summary": "829474",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=829474"
},
{
"category": "external",
"summary": "832425",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=832425"
},
{
"category": "external",
"summary": "832462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=832462"
},
{
"category": "external",
"summary": "840595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=840595"
},
{
"category": "external",
"summary": "840600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=840600"
},
{
"category": "external",
"summary": "840603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=840603"
},
{
"category": "external",
"summary": "840609",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=840609"
},
{
"category": "external",
"summary": "840792",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=840792"
},
{
"category": "external",
"summary": "840969",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=840969"
},
{
"category": "external",
"summary": "841868",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=841868"
},
{
"category": "external",
"summary": "843625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=843625"
},
{
"category": "external",
"summary": "843857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=843857"
},
{
"category": "external",
"summary": "843861",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=843861"
},
{
"category": "external",
"summary": "843904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=843904"
},
{
"category": "external",
"summary": "845501",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=845501"
},
{
"category": "external",
"summary": "845620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=845620"
},
{
"category": "external",
"summary": "847024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847024"
},
{
"category": "external",
"summary": "847117",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847117"
},
{
"category": "external",
"summary": "847598",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847598"
},
{
"category": "external",
"summary": "850336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=850336"
},
{
"category": "external",
"summary": "852508",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=852508"
},
{
"category": "external",
"summary": "854278",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=854278"
},
{
"category": "external",
"summary": "854283",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=854283"
},
{
"category": "external",
"summary": "854985",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=854985"
},
{
"category": "external",
"summary": "856303",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=856303"
},
{
"category": "external",
"summary": "856777",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=856777"
},
{
"category": "external",
"summary": "856795",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=856795"
},
{
"category": "external",
"summary": "857452",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=857452"
},
{
"category": "external",
"summary": "859128",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=859128"
},
{
"category": "external",
"summary": "863461",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=863461"
},
{
"category": "external",
"summary": "865571",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=865571"
},
{
"category": "external",
"summary": "866323",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=866323"
},
{
"category": "external",
"summary": "866972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=866972"
},
{
"category": "external",
"summary": "866995",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=866995"
},
{
"category": "external",
"summary": "868290",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=868290"
},
{
"category": "external",
"summary": "869380",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=869380"
},
{
"category": "external",
"summary": "871622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=871622"
},
{
"category": "external",
"summary": "872332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=872332"
},
{
"category": "external",
"summary": "872334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=872334"
},
{
"category": "external",
"summary": "872335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=872335"
},
{
"category": "external",
"summary": "872602",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=872602"
},
{
"category": "external",
"summary": "872687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=872687"
},
{
"category": "external",
"summary": "873038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=873038"
},
{
"category": "external",
"summary": "873443",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=873443"
},
{
"category": "external",
"summary": "873803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=873803"
},
{
"category": "external",
"summary": "873809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=873809"
},
{
"category": "external",
"summary": "874182",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=874182"
},
{
"category": "external",
"summary": "874280",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=874280"
},
{
"category": "external",
"summary": "874502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=874502"
},
{
"category": "external",
"summary": "874510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=874510"
},
{
"category": "external",
"summary": "874583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=874583"
},
{
"category": "external",
"summary": "874737",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=874737"
},
{
"category": "external",
"summary": "874744",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=874744"
},
{
"category": "external",
"summary": "875101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=875101"
},
{
"category": "external",
"summary": "875609",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=875609"
},
{
"category": "external",
"summary": "875876",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=875876"
},
{
"category": "external",
"summary": "876869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=876869"
},
{
"category": "external",
"summary": "876896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=876896"
},
{
"category": "external",
"summary": "876911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=876911"
},
{
"category": "external",
"summary": "877317",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=877317"
},
{
"category": "external",
"summary": "877473",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=877473"
},
{
"category": "external",
"summary": "877894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=877894"
},
{
"category": "external",
"summary": "878191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=878191"
},
{
"category": "external",
"summary": "878341",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=878341"
},
{
"category": "external",
"summary": "878355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=878355"
},
{
"category": "external",
"summary": "878370",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=878370"
},
{
"category": "external",
"summary": "878377",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=878377"
},
{
"category": "external",
"summary": "878693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=878693"
},
{
"category": "external",
"summary": "878750",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=878750"
},
{
"category": "external",
"summary": "879094",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=879094"
},
{
"category": "external",
"summary": "879170",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=879170"
},
{
"category": "external",
"summary": "879245",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=879245"
},
{
"category": "external",
"summary": "879320",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=879320"
},
{
"category": "external",
"summary": "880113",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=880113"
},
{
"category": "external",
"summary": "880116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=880116"
},
{
"category": "external",
"summary": "880710",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=880710"
},
{
"category": "external",
"summary": "880848",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=880848"
},
{
"category": "external",
"summary": "880905",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=880905"
},
{
"category": "external",
"summary": "881616",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=881616"
},
{
"category": "external",
"summary": "882129",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=882129"
},
{
"category": "external",
"summary": "882957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=882957"
},
{
"category": "external",
"summary": "885096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=885096"
},
{
"category": "external",
"summary": "886137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=886137"
},
{
"category": "external",
"summary": "886462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=886462"
},
{
"category": "external",
"summary": "890000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=890000"
},
{
"category": "external",
"summary": "892639",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892639"
},
{
"category": "external",
"summary": "892806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
},
{
"category": "external",
"summary": "895277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895277"
},
{
"category": "external",
"summary": "895282",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895282"
},
{
"category": "external",
"summary": "895384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895384"
},
{
"category": "external",
"summary": "896550",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=896550"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0544.json"
}
],
"title": "Red Hat Security Advisory: Subscription Asset Manager 1.2 update",
"tracking": {
"current_release_date": "2024-11-22T06:14:27+00:00",
"generator": {
"date": "2024-11-22T06:14:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2013:0544",
"initial_release_date": "2013-02-21T19:04:00+00:00",
"revision_history": [
{
"date": "2013-02-21T19:04:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2013-02-25T23:08:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T06:14:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Subscription Asset Manager for RHEL 6 Server",
"product": {
"name": "Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12",
"product_identification_helper": {
"cpe": "cpe:/a:rhel_sam:1.2::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Subscription Asset Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "quartz-0:2.1.5-4.el6_3.src",
"product": {
"name": "quartz-0:2.1.5-4.el6_3.src",
"product_id": "quartz-0:2.1.5-4.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/quartz@2.1.5-4.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "katello-certs-tools-0:1.2.1-1h.el6_3.src",
"product": {
"name": "katello-certs-tools-0:1.2.1-1h.el6_3.src",
"product_id": "katello-certs-tools-0:1.2.1-1h.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-certs-tools@1.2.1-1h.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "elasticsearch-0:0.19.9-5.el6_3.src",
"product": {
"name": "elasticsearch-0:0.19.9-5.el6_3.src",
"product_id": "elasticsearch-0:0.19.9-5.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/elasticsearch@0.19.9-5.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "lucene3-0:3.6.1-10h.el6_3.src",
"product": {
"name": "lucene3-0:3.6.1-10h.el6_3.src",
"product_id": "lucene3-0:3.6.1-10h.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/lucene3@3.6.1-10h.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "candlepin-0:0.7.23-1.el6_3.src",
"product": {
"name": "candlepin-0:0.7.23-1.el6_3.src",
"product_id": "candlepin-0:0.7.23-1.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin@0.7.23-1.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"product": {
"name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"product_id": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-mime4j@0.6-4_redhat_1.ep6.el6.1?arch=src"
}
}
},
{
"category": "product_version",
"name": "thumbslug-0:0.0.28-1.el6_3.src",
"product": {
"name": "thumbslug-0:0.0.28-1.el6_3.src",
"product_id": "thumbslug-0:0.0.28-1.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thumbslug@0.0.28-1.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "katello-selinux-0:1.2.1-2h.el6_3.src",
"product": {
"name": "katello-selinux-0:1.2.1-2h.el6_3.src",
"product_id": "katello-selinux-0:1.2.1-2h.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-selinux@1.2.1-2h.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-0:2.6.17-2.el6cf.src",
"product": {
"name": "puppet-0:2.6.17-2.el6cf.src",
"product_id": "puppet-0:2.6.17-2.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet@2.6.17-2.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-mail-0:2.3.0-3.el6cf.src",
"product": {
"name": "rubygem-mail-0:2.3.0-3.el6cf.src",
"product_id": "rubygem-mail-0:2.3.0-3.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-mail@2.3.0-3.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "katello-cli-0:1.2.1-12h.el6_3.src",
"product": {
"name": "katello-cli-0:1.2.1-12h.el6_3.src",
"product_id": "katello-cli-0:1.2.1-12h.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-cli@1.2.1-12h.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"product": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"product_id": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"product": {
"name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"product_id": "rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-apipie-rails@0.0.12-2.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"product": {
"name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"product_id": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ldap_fluff@0.1.3-1.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "snappy-java-0:1.0.4-2.el6_3.src",
"product": {
"name": "snappy-java-0:1.0.4-2.el6_3.src",
"product_id": "snappy-java-0:1.0.4-2.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/snappy-java@1.0.4-2.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-commons-codec-0:1.7-2.el6_3.src",
"product": {
"name": "apache-commons-codec-0:1.7-2.el6_3.src",
"product_id": "apache-commons-codec-0:1.7-2.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-codec@1.7-2.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"product": {
"name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"product_id": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sigar@1.6.5-0.12.git58097d9h.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "katello-configure-0:1.2.3-3h.el6_3.src",
"product": {
"name": "katello-configure-0:1.2.3-3h.el6_3.src",
"product_id": "katello-configure-0:1.2.3-3h.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-configure@1.2.3-3h.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "katello-0:1.2.1-15h.el6_3.src",
"product": {
"name": "katello-0:1.2.1-15h.el6_3.src",
"product_id": "katello-0:1.2.1-15h.el6_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello@1.2.1-15h.el6_3?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
"product": {
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
"product_id": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activesupport@3.0.10-10.el6cf?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-rack-1:1.3.0-3.el6cf.src",
"product": {
"name": "rubygem-rack-1:1.3.0-3.el6cf.src",
"product_id": "rubygem-rack-1:1.3.0-3.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rack@1.3.0-3.el6cf?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "quartz-0:2.1.5-4.el6_3.noarch",
"product": {
"name": "quartz-0:2.1.5-4.el6_3.noarch",
"product_id": "quartz-0:2.1.5-4.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/quartz@2.1.5-4.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"product": {
"name": "katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"product_id": "katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-certs-tools@1.2.1-1h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "elasticsearch-0:0.19.9-5.el6_3.noarch",
"product": {
"name": "elasticsearch-0:0.19.9-5.el6_3.noarch",
"product_id": "elasticsearch-0:0.19.9-5.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/elasticsearch@0.19.9-5.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "lucene3-0:3.6.1-10h.el6_3.noarch",
"product": {
"name": "lucene3-0:3.6.1-10h.el6_3.noarch",
"product_id": "lucene3-0:3.6.1-10h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/lucene3@3.6.1-10h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"product": {
"name": "lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"product_id": "lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/lucene3-contrib@3.6.1-10h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "candlepin-0:0.7.23-1.el6_3.noarch",
"product": {
"name": "candlepin-0:0.7.23-1.el6_3.noarch",
"product_id": "candlepin-0:0.7.23-1.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin@0.7.23-1.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"product": {
"name": "candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"product_id": "candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin-tomcat6@0.7.23-1.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"product": {
"name": "candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"product_id": "candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin-selinux@0.7.23-1.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "candlepin-devel-0:0.7.23-1.el6_3.noarch",
"product": {
"name": "candlepin-devel-0:0.7.23-1.el6_3.noarch",
"product_id": "candlepin-devel-0:0.7.23-1.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin-devel@0.7.23-1.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"product": {
"name": "apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"product_id": "apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-mime4j-javadoc@0.6-4_redhat_1.ep6.el6.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"product": {
"name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"product_id": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-mime4j@0.6-4_redhat_1.ep6.el6.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "thumbslug-selinux-0:0.0.28-1.el6_3.noarch",
"product": {
"name": "thumbslug-selinux-0:0.0.28-1.el6_3.noarch",
"product_id": "thumbslug-selinux-0:0.0.28-1.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thumbslug-selinux@0.0.28-1.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "thumbslug-0:0.0.28-1.el6_3.noarch",
"product": {
"name": "thumbslug-0:0.0.28-1.el6_3.noarch",
"product_id": "thumbslug-0:0.0.28-1.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thumbslug@0.0.28-1.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "katello-selinux-0:1.2.1-2h.el6_3.noarch",
"product": {
"name": "katello-selinux-0:1.2.1-2h.el6_3.noarch",
"product_id": "katello-selinux-0:1.2.1-2h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-selinux@1.2.1-2h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-server-0:2.6.17-2.el6cf.noarch",
"product": {
"name": "puppet-server-0:2.6.17-2.el6cf.noarch",
"product_id": "puppet-server-0:2.6.17-2.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-server@2.6.17-2.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-0:2.6.17-2.el6cf.noarch",
"product": {
"name": "puppet-0:2.6.17-2.el6cf.noarch",
"product_id": "puppet-0:2.6.17-2.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet@2.6.17-2.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"product": {
"name": "rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"product_id": "rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-mail-doc@2.3.0-3.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-mail-0:2.3.0-3.el6cf.noarch",
"product": {
"name": "rubygem-mail-0:2.3.0-3.el6cf.noarch",
"product_id": "rubygem-mail-0:2.3.0-3.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-mail@2.3.0-3.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "katello-cli-0:1.2.1-12h.el6_3.noarch",
"product": {
"name": "katello-cli-0:1.2.1-12h.el6_3.noarch",
"product_id": "katello-cli-0:1.2.1-12h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-cli@1.2.1-12h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"product": {
"name": "katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"product_id": "katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-cli-common@1.2.1-12h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"product": {
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"product_id": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ruby_parser-doc@2.0.4-6.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"product": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"product_id": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"product": {
"name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"product_id": "rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-apipie-rails@0.0.12-2.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"product": {
"name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"product_id": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ldap_fluff@0.1.3-1.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "katello-configure-0:1.2.3-3h.el6_3.noarch",
"product": {
"name": "katello-configure-0:1.2.3-3h.el6_3.noarch",
"product_id": "katello-configure-0:1.2.3-3h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-configure@1.2.3-3h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "katello-common-0:1.2.1-15h.el6_3.noarch",
"product": {
"name": "katello-common-0:1.2.1-15h.el6_3.noarch",
"product_id": "katello-common-0:1.2.1-15h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-common@1.2.1-15h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"product": {
"name": "katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"product_id": "katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-glue-candlepin@1.2.1-15h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"product": {
"name": "katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"product_id": "katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-headpin-all@1.2.1-15h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "katello-headpin-0:1.2.1-15h.el6_3.noarch",
"product": {
"name": "katello-headpin-0:1.2.1-15h.el6_3.noarch",
"product_id": "katello-headpin-0:1.2.1-15h.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/katello-headpin@1.2.1-15h.el6_3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"product": {
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"product_id": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activesupport@3.0.10-10.el6cf?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
"product": {
"name": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
"product_id": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rack@1.3.0-3.el6cf?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"product": {
"name": "snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"product_id": "snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/snappy-java-debuginfo@1.0.4-2.el6_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "snappy-java-0:1.0.4-2.el6_3.x86_64",
"product": {
"name": "snappy-java-0:1.0.4-2.el6_3.x86_64",
"product_id": "snappy-java-0:1.0.4-2.el6_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/snappy-java@1.0.4-2.el6_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "apache-commons-codec-0:1.7-2.el6_3.x86_64",
"product": {
"name": "apache-commons-codec-0:1.7-2.el6_3.x86_64",
"product_id": "apache-commons-codec-0:1.7-2.el6_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-codec@1.7-2.el6_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"product": {
"name": "apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"product_id": "apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-codec-debuginfo@1.7-2.el6_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"product": {
"name": "sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"product_id": "sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sigar-java@1.6.5-0.12.git58097d9h.el6_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"product": {
"name": "sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"product_id": "sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sigar-debuginfo@1.6.5-0.12.git58097d9h.el6_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"product": {
"name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"product_id": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sigar@1.6.5-0.12.git58097d9h.el6_3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-codec-0:1.7-2.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src"
},
"product_reference": "apache-commons-codec-0:1.7-2.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-codec-0:1.7-2.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64"
},
"product_reference": "apache-commons-codec-0:1.7-2.el6_3.x86_64",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64"
},
"product_reference": "apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch"
},
"product_reference": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src"
},
"product_reference": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch"
},
"product_reference": "apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-0:0.7.23-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch"
},
"product_reference": "candlepin-0:0.7.23-1.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-0:0.7.23-1.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src"
},
"product_reference": "candlepin-0:0.7.23-1.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-devel-0:0.7.23-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch"
},
"product_reference": "candlepin-devel-0:0.7.23-1.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-selinux-0:0.7.23-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch"
},
"product_reference": "candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-tomcat6-0:0.7.23-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch"
},
"product_reference": "candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "elasticsearch-0:0.19.9-5.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch"
},
"product_reference": "elasticsearch-0:0.19.9-5.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "elasticsearch-0:0.19.9-5.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src"
},
"product_reference": "elasticsearch-0:0.19.9-5.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-0:1.2.1-15h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src"
},
"product_reference": "katello-0:1.2.1-15h.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-certs-tools-0:1.2.1-1h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch"
},
"product_reference": "katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-certs-tools-0:1.2.1-1h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src"
},
"product_reference": "katello-certs-tools-0:1.2.1-1h.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-cli-0:1.2.1-12h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch"
},
"product_reference": "katello-cli-0:1.2.1-12h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-cli-0:1.2.1-12h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src"
},
"product_reference": "katello-cli-0:1.2.1-12h.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-cli-common-0:1.2.1-12h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch"
},
"product_reference": "katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-common-0:1.2.1-15h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch"
},
"product_reference": "katello-common-0:1.2.1-15h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-configure-0:1.2.3-3h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch"
},
"product_reference": "katello-configure-0:1.2.3-3h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-configure-0:1.2.3-3h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src"
},
"product_reference": "katello-configure-0:1.2.3-3h.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch"
},
"product_reference": "katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-headpin-0:1.2.1-15h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch"
},
"product_reference": "katello-headpin-0:1.2.1-15h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-headpin-all-0:1.2.1-15h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch"
},
"product_reference": "katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-selinux-0:1.2.1-2h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch"
},
"product_reference": "katello-selinux-0:1.2.1-2h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "katello-selinux-0:1.2.1-2h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src"
},
"product_reference": "katello-selinux-0:1.2.1-2h.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lucene3-0:3.6.1-10h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch"
},
"product_reference": "lucene3-0:3.6.1-10h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lucene3-0:3.6.1-10h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src"
},
"product_reference": "lucene3-0:3.6.1-10h.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lucene3-contrib-0:3.6.1-10h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch"
},
"product_reference": "lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-0:2.6.17-2.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch"
},
"product_reference": "puppet-0:2.6.17-2.el6cf.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-0:2.6.17-2.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src"
},
"product_reference": "puppet-0:2.6.17-2.el6cf.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-server-0:2.6.17-2.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch"
},
"product_reference": "puppet-server-0:2.6.17-2.el6cf.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quartz-0:2.1.5-4.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch"
},
"product_reference": "quartz-0:2.1.5-4.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quartz-0:2.1.5-4.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src"
},
"product_reference": "quartz-0:2.1.5-4.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch"
},
"product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src"
},
"product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch"
},
"product_reference": "rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src"
},
"product_reference": "rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch"
},
"product_reference": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src"
},
"product_reference": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-mail-0:2.3.0-3.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch"
},
"product_reference": "rubygem-mail-0:2.3.0-3.el6cf.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-mail-0:2.3.0-3.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src"
},
"product_reference": "rubygem-mail-0:2.3.0-3.el6cf.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-mail-doc-0:2.3.0-3.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch"
},
"product_reference": "rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-1:1.3.0-3.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch"
},
"product_reference": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-1:1.3.0-3.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src"
},
"product_reference": "rubygem-rack-1:1.3.0-3.el6cf.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch"
},
"product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src"
},
"product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
},
"product_reference": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src"
},
"product_reference": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64"
},
"product_reference": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64"
},
"product_reference": "sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64"
},
"product_reference": "sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "snappy-java-0:1.0.4-2.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src"
},
"product_reference": "snappy-java-0:1.0.4-2.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "snappy-java-0:1.0.4-2.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64"
},
"product_reference": "snappy-java-0:1.0.4-2.el6_3.x86_64",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64"
},
"product_reference": "snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thumbslug-0:0.0.28-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch"
},
"product_reference": "thumbslug-0:0.0.28-1.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thumbslug-0:0.0.28-1.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src"
},
"product_reference": "thumbslug-0:0.0.28-1.el6_3.src",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thumbslug-selinux-0:0.0.28-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
"product_id": "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
},
"product_reference": "thumbslug-selinux-0:0.0.28-1.el6_3.noarch",
"relates_to_product_reference": "6Server-SubscriptionAssetManager12"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Aaron Weitekamp"
],
"organization": "Red Hat Cloud Quality Engineering team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-5561",
"discovery_date": "2012-11-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "879094"
}
],
"notes": [
{
"category": "description",
"text": "script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Katello: /etc/katello/secure/passphrase is world readable",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-5561"
},
{
"category": "external",
"summary": "RHBZ#879094",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=879094"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-5561",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-5561"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-5561",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5561"
}
],
"release_date": "2013-01-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T19:04:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0544"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Katello: /etc/katello/secure/passphrase is world readable"
},
{
"acknowledgments": [
{
"names": [
"Lukas Zapletal"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-5603",
"discovery_date": "2012-05-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "882129"
}
],
"notes": [
{
"category": "description",
"text": "proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users\u0027 settings via unspecified vectors related to the \"consumer UUID\" of a system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Katello: lack of authorization in proxies_controller.rb",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-5603"
},
{
"category": "external",
"summary": "RHBZ#882129",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=882129"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-5603",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-5603"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-5603",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5603"
}
],
"release_date": "2012-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T19:04:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0544"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Katello: lack of authorization in proxies_controller.rb"
},
{
"cve": "CVE-2012-6109",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2013-01-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "895277"
}
],
"notes": [
{
"category": "description",
"text": "lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: parsing Content-Disposition header DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6109"
},
{
"category": "external",
"summary": "RHBZ#895277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895277"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6109",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6109"
}
],
"release_date": "2012-05-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T19:04:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0544"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: parsing Content-Disposition header DoS"
},
{
"acknowledgments": [
{
"names": [
"Michael Scherer"
],
"organization": "Red Hat Regional IT team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-0162",
"cwe": {
"id": "CWE-377",
"name": "Insecure Temporary File"
},
"discovery_date": "2013-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "892806"
}
],
"notes": [
{
"category": "description",
"text": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-ruby_parser: incorrect temporary file usage",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0162"
},
{
"category": "external",
"summary": "RHBZ#892806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0162",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0162"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
}
],
"release_date": "2013-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T19:04:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0544"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-ruby_parser: incorrect temporary file usage"
},
{
"cve": "CVE-2013-0183",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2013-01-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "895282"
}
],
"notes": [
{
"category": "description",
"text": "multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: receiving excessively long lines triggers out-of-memory error",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0183"
},
{
"category": "external",
"summary": "RHBZ#895282",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895282"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0183",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0183"
}
],
"release_date": "2013-01-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T19:04:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0544"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: receiving excessively long lines triggers out-of-memory error"
},
{
"cve": "CVE-2013-0184",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2013-01-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "895384"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to \"symbolized arbitrary strings.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Rack::Auth:: AbstractRequest DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0184"
},
{
"category": "external",
"summary": "RHBZ#895384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895384"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0184",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0184"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0184",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0184"
}
],
"release_date": "2012-05-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T19:04:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0544"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
"6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
"6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
"6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
"6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
"6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
"6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
"6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
"6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
"6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
"6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
"6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
"6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Rack::Auth:: AbstractRequest DoS"
}
]
}
rhsa-2013_0548
Vulnerability from csaf_redhat
Published
2013-02-21 18:56
Modified
2024-11-22 06:25
Summary
Red Hat Security Advisory: CloudForms Common 1.1.2 update
Notes
Topic
CloudForms Common 1.1.2 is now available.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
Red Hat CloudForms is an on-premise hybrid cloud
Infrastructure-as-a-Service (IaaS) product that lets you create and manage
private and public clouds. It provides self-service computing resources to
users in a managed, governed, and secure way.
Three flaws were found in rubygem-rack. A remote attacker could use these
flaws to perform a denial of service attack against applications using
rubygem-rack. (CVE-2012-6109, CVE-2013-0183, CVE-2013-0184)
It was found that documentation created by rubygem-rdoc was vulnerable to
a cross-site scripting (XSS) attack. If such documentation was accessible
over a network, and a remote attacker could trick a user into visiting a
specially-crafted URL, it would lead to arbitrary web script execution in
the context of the user's session. As rubygem-rdoc is used for creating
documentation for Ruby source files (such as classes, modules, and so on),
it is not a common scenario to make such documentation accessible over the
network. (CVE-2013-0256)
It was found that ruby_parser from rubygem-ruby_parser created a temporary
file in an insecure way. A local attacker could use this flaw to perform a
symbolic link attack, overwriting arbitrary files accessible to the
application using ruby_parser. (CVE-2013-0162)
Red Hat would like to thank Eric Hodel of RDoc upstream for reporting
CVE-2013-0256. Upstream acknowledges Evgeny Ermakov as the original
reporter of CVE-2013-0256. The CVE-2013-0162 issue was discovered by
Michael Scherer of the Red Hat Regional IT team.
Refer to the CloudForms 1.1.2 Release Notes for further information about
this release. The Release Notes will be available shortly from
https://access.redhat.com/knowledge/docs/
Users of CloudForms Common are advised to upgrade to these updated
packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "CloudForms Common 1.1.2 is now available.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat CloudForms is an on-premise hybrid cloud\nInfrastructure-as-a-Service (IaaS) product that lets you create and manage\nprivate and public clouds. It provides self-service computing resources to\nusers in a managed, governed, and secure way.\n\nThree flaws were found in rubygem-rack. A remote attacker could use these\nflaws to perform a denial of service attack against applications using\nrubygem-rack. (CVE-2012-6109, CVE-2013-0183, CVE-2013-0184)\n\nIt was found that documentation created by rubygem-rdoc was vulnerable to\na cross-site scripting (XSS) attack. If such documentation was accessible\nover a network, and a remote attacker could trick a user into visiting a\nspecially-crafted URL, it would lead to arbitrary web script execution in\nthe context of the user\u0027s session. As rubygem-rdoc is used for creating\ndocumentation for Ruby source files (such as classes, modules, and so on),\nit is not a common scenario to make such documentation accessible over the\nnetwork. (CVE-2013-0256)\n\nIt was found that ruby_parser from rubygem-ruby_parser created a temporary\nfile in an insecure way. A local attacker could use this flaw to perform a\nsymbolic link attack, overwriting arbitrary files accessible to the\napplication using ruby_parser. (CVE-2013-0162)\n\nRed Hat would like to thank Eric Hodel of RDoc upstream for reporting\nCVE-2013-0256. Upstream acknowledges Evgeny Ermakov as the original\nreporter of CVE-2013-0256. The CVE-2013-0162 issue was discovered by\nMichael Scherer of the Red Hat Regional IT team.\n\nRefer to the CloudForms 1.1.2 Release Notes for further information about\nthis release. The Release Notes will be available shortly from\nhttps://access.redhat.com/knowledge/docs/\n\nUsers of CloudForms Common are advised to upgrade to these updated\npackages.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2013:0548",
"url": "https://access.redhat.com/errata/RHSA-2013:0548"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/knowledge/docs/",
"url": "https://access.redhat.com/knowledge/docs/"
},
{
"category": "external",
"summary": "892806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
},
{
"category": "external",
"summary": "895277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895277"
},
{
"category": "external",
"summary": "895282",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895282"
},
{
"category": "external",
"summary": "895384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895384"
},
{
"category": "external",
"summary": "907820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=907820"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0548.json"
}
],
"title": "Red Hat Security Advisory: CloudForms Common 1.1.2 update",
"tracking": {
"current_release_date": "2024-11-22T06:25:49+00:00",
"generator": {
"date": "2024-11-22T06:25:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2013:0548",
"initial_release_date": "2013-02-21T18:56:00+00:00",
"revision_history": [
{
"date": "2013-02-21T18:56:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2013-02-21T19:00:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T06:25:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "CloudForms Cloud Engine for RHEL 6 Server",
"product": {
"name": "CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine",
"product_identification_helper": {
"cpe": "cpe:/a:cloudforms_cloudengine:1::el6"
}
}
},
{
"category": "product_name",
"name": "CloudForms System Engine for RHEL 6 Server",
"product": {
"name": "CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine",
"product_identification_helper": {
"cpe": "cpe:/a:cloudforms_systemengine:1::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat CloudForms"
},
{
"branches": [
{
"category": "product_version",
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"product": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"product_id": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"product": {
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"product_id": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ruby_parser-doc@2.0.4-6.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
"product": {
"name": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
"product_id": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rack@1.3.0-3.el6cf?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"product": {
"name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"product_id": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rdoc-doc@3.8-6.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rdoc-0:3.8-6.el6cf.noarch",
"product": {
"name": "rubygem-rdoc-0:3.8-6.el6cf.noarch",
"product_id": "rubygem-rdoc-0:3.8-6.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rdoc@3.8-6.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"product": {
"name": "rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"product_id": "rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-shoulda-doc@2.11.3-5.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"product": {
"name": "rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"product_id": "rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-shoulda@2.11.3-5.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"product": {
"name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"product_id": "rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rspec-rails@2.6.1-7.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"product": {
"name": "rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"product_id": "rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rspec-rails-doc@2.6.1-7.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"product": {
"name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"product_id": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rails_warden-doc@0.5.5-2.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"product": {
"name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"product_id": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rails_warden@0.5.5-2.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"product": {
"name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"product_id": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-delayed_job@2.1.4-3.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"product": {
"name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"product_id": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-delayed_job-doc@2.1.4-3.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"product": {
"name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"product_id": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-nokogiri-doc@1.5.0-0.9.beta4.el6cf?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"product": {
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"product_id": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activesupport@3.0.10-10.el6cf?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"product": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"product_id": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-rack-1:1.3.0-3.el6cf.src",
"product": {
"name": "rubygem-rack-1:1.3.0-3.el6cf.src",
"product_id": "rubygem-rack-1:1.3.0-3.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rack@1.3.0-3.el6cf?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-rdoc-0:3.8-6.el6cf.src",
"product": {
"name": "rubygem-rdoc-0:3.8-6.el6cf.src",
"product_id": "rubygem-rdoc-0:3.8-6.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rdoc@3.8-6.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-shoulda-0:2.11.3-5.el6cf.src",
"product": {
"name": "rubygem-shoulda-0:2.11.3-5.el6cf.src",
"product_id": "rubygem-shoulda-0:2.11.3-5.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-shoulda@2.11.3-5.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"product": {
"name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"product_id": "rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rspec-rails@2.6.1-7.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"product": {
"name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"product_id": "rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rails_warden@0.5.5-2.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"product": {
"name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"product_id": "rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-delayed_job@2.1.4-3.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"product": {
"name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"product_id": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-nokogiri@1.5.0-0.9.beta4.el6cf?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
"product": {
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
"product_id": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activesupport@3.0.10-10.el6cf?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"product": {
"name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"product_id": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-nokogiri@1.5.0-0.9.beta4.el6cf?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"product": {
"name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"product_id": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby-nokogiri@1.5.0-0.9.beta4.el6cf?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"product": {
"name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"product_id": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-nokogiri-debuginfo@1.5.0-0.9.beta4.el6cf?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64"
},
"product_reference": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch"
},
"product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src"
},
"product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch"
},
"product_reference": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src"
},
"product_reference": "rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch"
},
"product_reference": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src"
},
"product_reference": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64"
},
"product_reference": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64"
},
"product_reference": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch"
},
"product_reference": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-1:1.3.0-3.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch"
},
"product_reference": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-1:1.3.0-3.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src"
},
"product_reference": "rubygem-rack-1:1.3.0-3.el6cf.src",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch"
},
"product_reference": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src"
},
"product_reference": "rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch"
},
"product_reference": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rdoc-0:3.8-6.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch"
},
"product_reference": "rubygem-rdoc-0:3.8-6.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rdoc-0:3.8-6.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src"
},
"product_reference": "rubygem-rdoc-0:3.8-6.el6cf.src",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch"
},
"product_reference": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch"
},
"product_reference": "rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src"
},
"product_reference": "rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch"
},
"product_reference": "rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch"
},
"product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src"
},
"product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
},
"product_reference": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-shoulda-0:2.11.3-5.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch"
},
"product_reference": "rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-shoulda-0:2.11.3-5.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src"
},
"product_reference": "rubygem-shoulda-0:2.11.3-5.el6cf.src",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
"product_id": "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch"
},
"product_reference": "rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"relates_to_product_reference": "6Server-CloudEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64"
},
"product_reference": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch"
},
"product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-1:3.0.10-10.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src"
},
"product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch"
},
"product_reference": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src"
},
"product_reference": "rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch"
},
"product_reference": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src"
},
"product_reference": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64"
},
"product_reference": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64"
},
"product_reference": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch"
},
"product_reference": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-1:1.3.0-3.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch"
},
"product_reference": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-1:1.3.0-3.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src"
},
"product_reference": "rubygem-rack-1:1.3.0-3.el6cf.src",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch"
},
"product_reference": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src"
},
"product_reference": "rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch"
},
"product_reference": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rdoc-0:3.8-6.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch"
},
"product_reference": "rubygem-rdoc-0:3.8-6.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rdoc-0:3.8-6.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src"
},
"product_reference": "rubygem-rdoc-0:3.8-6.el6cf.src",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch"
},
"product_reference": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch"
},
"product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src"
},
"product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"relates_to_product_reference": "6Server-SystemEngine"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
"product_id": "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
},
"product_reference": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"relates_to_product_reference": "6Server-SystemEngine"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-6109",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2013-01-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "895277"
}
],
"notes": [
{
"category": "description",
"text": "lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: parsing Content-Disposition header DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6109"
},
{
"category": "external",
"summary": "RHBZ#895277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895277"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6109",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6109"
}
],
"release_date": "2012-05-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T18:56:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0548"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: parsing Content-Disposition header DoS"
},
{
"acknowledgments": [
{
"names": [
"Michael Scherer"
],
"organization": "Red Hat Regional IT team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-0162",
"cwe": {
"id": "CWE-377",
"name": "Insecure Temporary File"
},
"discovery_date": "2013-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "892806"
}
],
"notes": [
{
"category": "description",
"text": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-ruby_parser: incorrect temporary file usage",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0162"
},
{
"category": "external",
"summary": "RHBZ#892806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0162",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0162"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
}
],
"release_date": "2013-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T18:56:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0548"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-ruby_parser: incorrect temporary file usage"
},
{
"cve": "CVE-2013-0183",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2013-01-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "895282"
}
],
"notes": [
{
"category": "description",
"text": "multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: receiving excessively long lines triggers out-of-memory error",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0183"
},
{
"category": "external",
"summary": "RHBZ#895282",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895282"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0183",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0183"
}
],
"release_date": "2013-01-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T18:56:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0548"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: receiving excessively long lines triggers out-of-memory error"
},
{
"cve": "CVE-2013-0184",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2013-01-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "895384"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to \"symbolized arbitrary strings.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Rack::Auth:: AbstractRequest DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0184"
},
{
"category": "external",
"summary": "RHBZ#895384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895384"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0184",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0184"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0184",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0184"
}
],
"release_date": "2012-05-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T18:56:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0548"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Rack::Auth:: AbstractRequest DoS"
},
{
"acknowledgments": [
{
"names": [
"Eric Hodel"
],
"organization": "RDoc upstream"
},
{
"names": [
"Evgeny Ermakov"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2013-0256",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2013-02-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "907820"
}
],
"notes": [
{
"category": "description",
"text": "darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0256"
},
{
"category": "external",
"summary": "RHBZ#907820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=907820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0256",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0256"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0256",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0256"
},
{
"category": "external",
"summary": "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/",
"url": "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/"
}
],
"release_date": "2013-02-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-21T18:56:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0548"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
"6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
"6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
"6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
"6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
"6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
"6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
"6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
"6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
"6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
"6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
"6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
"6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
"6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template"
}
]
}
ghsa-8mvw-22r7-w6fq
Vulnerability from github
Published
2022-05-05 02:48
Modified
2023-03-08 19:28
Summary
ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name
Details
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
{
"affected": [
{
"package": {
"ecosystem": "RubyGems",
"name": "ruby_parser"
},
"ranges": [
{
"events": [
{
"introduced": "2.0.2"
},
{
"fixed": "3.1.2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2013-0162"
],
"database_specific": {
"cwe_ids": [
"CWE-377"
],
"github_reviewed": true,
"github_reviewed_at": "2023-03-08T19:28:01Z",
"nvd_published_at": "2013-03-01T05:40:00Z",
"severity": "LOW"
},
"details": "The `diff_pp` function in `lib/gauntlet_rubyparser.rb` in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in `/tmp`.",
"id": "GHSA-8mvw-22r7-w6fq",
"modified": "2023-03-08T19:28:01Z",
"published": "2022-05-05T02:48:30Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
},
{
"type": "WEB",
"url": "https://github.com/seattlerb/ruby_parser/commit/506c7e13cff6f8715385fa8488b621028b4ad280"
},
{
"type": "WEB",
"url": "https://github.com/seattlerb/ruby_parser/commit/c35acd878d50a8e4ea35933e3fbdc493421d422c"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2013:0544"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2013:0582"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2013-0162"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby_parser/CVE-2013-0162.yml"
},
{
"type": "PACKAGE",
"url": "https://github.com/seattlerb/ruby_parser"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2013-0544.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2013-0548.html"
}
],
"schema_version": "1.4.0",
"severity": [],
"summary": "ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.